Private-vlan – PLANET SGSD-1022 User Manual

Page 586

Advertising
background image

User’s Manual of SGSD-1022 / SGSD-1022P

SGSW-2840 / SGSW-2840P


To configure isolated VLANs, follow these steps:

1. Use

the private-vlan command to designate an isolated VLAN that will contain a single promiscuous port and one or more

isolated ports.

2. Use

the

switchport mode private-vlan command to configure one port as promiscuous (i.e., having access to all ports in

the isolated VLAN) one or more ports as host (i.e., isolated port).

3. Use the switchport private-vlan isolated command to assign a port to an isolated VLAN.

4. Use the show private-vlan command to verify your configuration settings.

private-vlan

Use this command to create a primary, community, or isolated private VLAN. Use the no form to remove the specified private

VLAN.

Syntax

private-vlan vlan-id {community | primary | isolated}

no private-vlan vlan-id vlan-id -ID of private VLAN.

• (Range: 1-4094, no leading zeroes).

• community - A VLAN in which traffic is restricted to host members in the same VLAN and to promiscuous ports in the

associate primary VLAN.

• primary - A VLAN which can contain one or more community VLANs, and serves to channel traffic between community

VLANs and other locations.

• isolated – Specifies an isolated VLAN. Ports assigned to an isolated VLAN can only communicate with the promiscuous

port within their own VLAN.

Default Setting

None

Command Mode

VLAN Configuration

Command Usage

• Private VLANs are used to restrict traffic to ports within the same community or isolated VLAN, and channel traffic

passing outside the community through promiscuous ports. When using community VLANs, they must be mapped to

an associated “primary” VLAN that contains promiscuous ports. When using an isolated VLAN, it must be configured to

contain a single promiscuous port.

• Port membership for private VLANs is static. Once a port has been assigned to a private VLAN, it cannot be

dynamically moved to another VLAN via GVRP.

• Private VLAN ports cannot be set to trunked mode. (See “switchport mode” on page 4-228.)

586

Advertising
This manual is related to the following products: