Private Vlan Configuration Guidelines; Private Vlan Configuration Example - Juniper EX2500 Configuration Manual

EX2500 Ethernet Switch Configuration Guide

Private VLAN Configuration Guidelines

Private VLAN Configuration Example

30
Private VLANs
The following guidelines apply when configuring private VLANs:
The default VLAN 1 cannot be a private VLAN.
The management VLAN 4095 cannot be a private VLAN. The management port
cannot be a member of a private VLAN.
IGMP Snooping must be disabled on isolated VLANs.
Each secondary port's (isolated port and community ports) PVID must match
its corresponding secondary VLAN ID.
Ports within a secondary VLAN cannot be members of other VLANs.
All VLANs that make up the private VLAN must belong to the same Spanning
Tree Group.
Follow this procedure to configure a private VLAN.
1. Select a VLAN and define the private VLAN type as primary.
ex2500(config)# vlan 100
ex2500(config-vlan)# enable
ex2500(config-vlan)# member 2
ex2500(config-vlan)# private-vlan type primary
ex2500(config-vlan)# private-vlan enable
ex2500(config-vlan)# exit
2. Configure a secondary VLAN and map it to the primary VLAN.
ex2500(config)# vlan 110
ex2500(config-vlan)# enable
ex2500(config-vlan)# member 3
ex2500(config-vlan)# member 4
ex2500(config-vlan)# private-vlan type isolated
ex2500(config-vlan)# private-vlan map 100
ex2500(config-vlan)# private-vlan enable
ex2500(config-vlan)# exit
3. Verify the configuration.
ex2500(config)# show private-vlan
Private-VLAN Type
------------ ---------
100 primary
110 isolated
Mapped-To Status
---------- ---------- -----------------
110 ena
100 ena
Ports
2
3-4