Private-Vlan - Planet SGS-6341 Series Command Manual

12.1.12 private-vlan

Command:
private-vlan {primary | isolated | community}
no private-vlan
Function:
Configure current VLAN to Private VLAN. The no command cancels the Private VLAN
configuration.
Parameter:
primary set current VLAN to Primary VLAN,
isolated set current VLAN to Isolated VLAN,
community set current VLAN to Community VLAN.
Command Mode:
VLAN mode
Default:
Private VLAN is not configured by default.
Usage Guide:
There are three Private VLANs: Primary VLAN, Isolated VLAN and Community VLAN. Ports in
Primary there are three Private VLANs: Primary VLAN, Isolated VLAN and Community VLAN can
communicate with ports of Isolated VLAN and Community VLAN related to this Primary VLAN; Ports
in Isolated VLAN are isolated between each other and only communicate with ports in Primary VLAN
they related to; ports in Community VLAN can communicate both with each other and with Primary
VLAN ports they related to; there is no communication between ports in Community VLAN and port
in Isolated VLAN.
Only VLANs containing empty Ethernet ports can be set to Private VLAN, and only the Private
VLANs configured with associated private relationships can set the Access Ethernet ports their
member ports. Normal VLAN will clear its Ethernet ports when set to Private VLAN.
It is to be noted Private VLAN messages will not be transmitted by GVRP.
Example:
Set VLAN100, 200, 300 to private vlans, with respectively primary, Isolated, Community types.
Switch(config)#vlan 100
Switch(Config-Vlan100)#private-vlan primary
Note:This will remove all the ports from vlan 100
Switch(Config-Vlan100)#exit
Switch(config)#vlan 200
Switch(Config-Vlan200)#private-vlan isolated
12-53