Table of Contents
Advertisement
can't be set as an untagged member of the normal VLAN, but can be a tagged member.
The command "show vlan" will only show information for normal VLANs. To show private VLAN,
please use the command "show privatevlan".
4. Subnet of private VLAN
A private VLAN group represents a single broadcast domain and can have one single subnet,
which must be created on the primary VLAN (any other VLAN is not allowed to have subnets.).
Once a private VLAN group and the corresponding subnet are created on a switch, only devices
connecting with promiscuous ports can communicate with the subnet in the switch(i.e., can
access (like ping) the subnet), not for others with shared ports or separated ports. So in real
networks, don't put network management work stations in positions only connecting with
separated ports and shared ports, in stead, they should connect with promiscuous ports.
4.2 Private VLAN configuration
For the convenience of users, the iSpirit 3026 switch provides a PRIVATE VLAN configuration
mode for CLI commands. Users can type most of the private VLAN commands to operate on
one VLAN group under this mode.
In the iSpirit 3026 switch, no VLAN and port configuration for any VLAN group. This section
introduces how to configure private VLAN:
To configure private VLAN group
To configure VLANs in a group
To configure separated ports in a group
To configure shared ports in a group
To configure promiscuous ports in a group
To enable or disable a group
To show group information
1. To configure private VLAN group
When configuring a VLAN group, first choose a group and enter its PRIVATE VLAN mode.
To enter the PRIVATE VLAN mode from the overall mode for a specific group with a
group-id between 1-12:
privatevlan <group-id>
To delete a vlan group under overall mode:
Advertisement
Table of Contents
