ZyXEL Communications XS3800-28 Cli Reference Manual page 264

VLAN 111 can send and receive traffic from the uplink port 24. This example also shows all private VLAN
rules configured on the
sysname# configure
sysname(config)# private-vlan name pvlan-111 vlan 111
sysname(config)# exit
sysname# show private-vlan
Private VLAN: 111
Name
------------ --------------------------
pvlan-111
sysname#
69.2 Private VLAN
Use Private VLAN if you want you to block traffic between ports in the same VLAN. Community and
Isolated VLANs are secondary private VLANs that must be associated with a Primary private VLAN.
• Primary: Ports in a Primary VLAN are promiscuous and they can communicate with all promiscuous
ports in the same primary VLAN, and all ports in associated community and isolated VLANs. They
cannot communicate with ports in different primary VLANs.
• Community: Ports in a Community VLAN can communicate with promiscuous ports in an associated
Primary VLAN and other community ports in the same Community VLAN. They cannot communicate
with ports in Isolated VLANs, non-associated Primary VLAN promiscuous ports nor community ports in
different Community VLANs.
• Isolated: Ports in an Isolated VLAN can communicate with promiscuous ports in an associated Primary
VLAN only. They cannot communicate with other isolated ports in the same Isolated VLAN, non-
associated Primary VLAN promiscuous ports nor any community ports.
Tagged private VLANs can span switches but trunking ports must be VLAN-trunking ports.
69.2.1 Command Summary
The following section lists the commands for this feature.
Table 168 private-vlan Command Summary
COMMAND
vlan <vlan-id>
private-vlan <primary |
isolated | community>
private-vlan association
<secondary-vlan-list>
no private-vlan
isolated | community>
no private-vlan association
Chapter 69 Private VLAN Commands
Switch
.
Active: Yes
Promiscuous Port
24
<primary |
Ethernet Switch CLI Reference Guide
DESCRIPTION
Enters config-vlan mode for the specified VLAN. Creates
the VLAN, if necessary.
Configures the specified VLAN as a Primary VLAN, Isolated
VLAN or a Community VLAN.
Primary private VLANs can associate with several
(secondary) Community private VLANs and up to one
(secondary) Isolated private VLAN. Specify a primary
private VLAN, then associate it with a secondary VLAN(s)
using this command.
Disables the VLAN as a Primary, Isolated or Community
VLAN.
Removes all association between the primary VLAN and
secondary VLANs.
264
M P
C 13
C 13
C 13
C 13
C 13