Table of Contents
Advertisement
4
Command Line Interface
Configuring Private VLANs
Private VLANs provide port-based security and isolation between ports within the
assigned VLAN. This switch supports two types of private VLAN ports: promiscuous,
and community ports. A promiscuous port can communicate with all interfaces within
a private VLAN. Community ports can only communicate with other ports in their
own community VLAN, and with their designated promiscuous ports. This section
describes commands used to configure private VLANs.
Command
Edit Private VLAN Groups
private-vlan
private-vlan association
Configure Private VLAN Interfaces
switchport mode
private-vlan
switchport private-vlan
host-association
switchport private-vlan
mapping
Display Private VLAN Information
show vlan private-vlan
To configure private VLANs, follow these steps:
1.
Use the private-vlan command to designate one or more community VLANs
and the primary VLAN that will channel traffic outside the community groups.
2.
Use the private-vlan association command to map the secondary (i.e.,
community) VLAN(s) to the primary VLAN.
3.
Use the switchport mode private-vlan command to configure ports as
promiscuous (i.e., having access to all ports in the primary VLAN) or host (i.e.,
having access restricted to community VLAN members, and channeling all
other traffic through a promiscuous port).
4.
Use the switchport private-vlan host-association command to assign a port
to a secondary VLAN.
5.
Use the switchport private-vlan mapping command to assign a port to a
primary VLAN.
6.
Use the show vlan private-vlan command to verify your configuration settings.
4-154
Table 4-54. Private VLAN Commands
Function
Adds or deletes primary and secondary VLANs
Associates a secondary VLAN with a primary VLAN
Sets an interface to host mode or promiscuous mode
Associates an interface with a secondary VLAN
Maps an interface to a primary VLAN
Shows private VLAN information
Mode
Page
VC
4-155
VC
4-156
IC
4-156
IC
4-157
IC
4-158
NE,
4-158
PE
Advertisement
Table of Contents
