Blade ICE G8000 - Manual (Page 60)

RackSwitch G8000 Application Guide
60 „ Chapter 3: VLANs BMD00041, November 2008
„ Community—A community port is a host port that belongs to a community VLAN. Com-
munity ports can communicate with other ports in the same community VLAN, and with
promiscuous ports. These interfaces are isolated at layer 2 from all other interfaces in
other communities and from isolated ports within the Private VLAN.
Configuration guidelines
The following guidelines apply when configuring Private VLANs:
„ The default VLAN 1 cannot be a Private VLAN.
„ IGMP Snooping must be disabled on isolated VLANs.
„
Each secondary port’s (isolated port and community ports) PVID must match its corre-
sponding secondary VLAN ID.
„ Private VLAN ports cannot be members of a trunk group. Link Aggregation Control Pro-
tocol (LACP) must be turned off on ports within a Private VLAN.
„ Ports within a secondary VLAN cannot be members of other VLANs.
„ All VLANs that comprise the Private VLAN must belong to the same Spanning Tree
Group.
Configuration example
Follow this procedure to configure a Private VLAN.
1. Select a VLAN and define the Private VLAN type as primary.
RS G8000 (config)# vlan 100
RS G8000 (config-vlan)# enable
RS G8000 (config-vlan)# member 2
RS G8000 (config-vlan)# private-vlan type primary
RS G8000 (config-vlan)# private-vlan enable
RS G8000 (config-vlan)# exit