Configuring Private Vlans - SMC Networks 6726AL2 Management Manual

C L
OMMAND INE
Command Mode
Normal Exec, Privileged Exec
Example
The following example shows how to display information for VLAN 1:
Console#show vlan id 1
Vlan ID:
Type:
Name:
Status:
Ports/Port Channel:
Console#

Configuring Private VLANs

Private VLANs provide port-based security and isolation between ports
within the assigned VLAN. This switch supports two types of private
VLANs: primary/secondary associated groups, and stand-alone isolated
VLANs. A primary VLAN contains promiscuous ports that can
communicate with all other ports in the private VLAN group, while a
secondary (or community) VLAN contains community ports that can
only communicate with other hosts within the secondary VLAN and with
any of the promiscuous ports in the associated primary VLAN. Isolated
VLANs, on the other hand, consist a single stand-alone VLAN that
contains one promiscuous port and one or more isolated (or host) ports.
In all cases, the promiscuous ports are designed to provide open access to
an external network such as the Internet, while the community or isolated
ports provide restricted access to local users.
Multiple primary VLANs can be configured on this switch, and multiple
community VLANs can be associated with each primary VLAN. One or
more isolated VLANs can also be configured. (Note that private VLANs
and normal VLANs can exist simultaneously within the same switch.)
4-208
I
NTERFACE
1
Static
DefaultVlan
Active
Eth1/ 1(S) Eth1/ 2(S) Eth1/ 3(S) Eth1/ 4(S) Eth1/ 5(S)
Eth1/ 6(S) Eth1/ 7(S) Eth1/ 8(S) Eth1/ 9(S) Eth1/10(S)
Eth1/11(S) Eth1/12(S) Eth1/13(S) Eth1/14(S) Eth1/15(S)
Eth1/16(S) Eth1/17(S) Eth1/18(S) Eth1/19(S) Eth1/20(S)
Eth1/21(S) Eth1/22(S) Eth1/23(S) Eth1/24(S) Eth1/25(S)
Eth1/26(S)