Protocol Vlans; Figure 3-121 Private Vlan Port Configuration - Samsung iES4028F Management Manual

3
Configuring the Switch
Web – Click VLAN, Private VLAN, Port Configuration or Trunk Configuration. Set the
PVLAN Port Type for each port that will join a private VLAN. Assign promiscuous
ports to a primary VLAN. Assign host ports to a community VLAN. After all the ports
have been configured, click Apply.
CLI – This example shows the switch configured with primary VLAN 5 and
secondary VLAN 6. Port 3 has been configured as a promiscuous port and mapped
to VLAN 5, while ports 4 and 5 have been configured as a host ports and associated
with VLAN 6. This means that traffic for port 4 and 5 can only pass through port 3.
Console(config)#interface ethernet 1/3
Console(config-if)#switchport mode private-vlan promiscuous
Console(config-if)#switchport private-vlan mapping 5
Console(config-if)#exit
Console(config)#interface ethernet 1/4
Console(config-if)#switchport mode private-vlan host
Console(config-if)#switchport private-vlan host-association 6
Console(config-if)#exit
Console(config)#interface ethernet 1/5
Console(config-if)#switchport mode private-vlan host
Console(config-if)#switchport private-vlan host-association 6
Console(config-if)#

Protocol VLANs

The network devices required to support multiple protocols cannot be easily grouped
into a common VLAN. This may require non-standard devices to pass traffic
between different VLANs in order to encompass all the devices participating in a
specific protocol. This kind of configuration deprives users of the basic benefits of
VLANs, including security and easy accessibility.
To avoid these problems, you can configure this switch with protocol-based VLANs
that divide the physical network into logical VLAN groups for each required protocol.
When a frame is received at a port, its VLAN membership can then be determined
based on the protocol type being used by the inbound packets.
3-214

Figure 3-121 Private VLAN Port Configuration

4-273
4-275
4-273
4-274