Configuring Private Vlans; Table 4-74 Private Vlan Commands - SMC Networks 8126PL2-F - annexe 1 Management Manual

Example
Console#show pvlan
Private VLAN status: Enabled
Up-link port:
Ethernet 1/12
Down-link port:
Ethernet 1/5
Ethernet 1/6
Ethernet 1/7
Ethernet 1/8
Console#

Configuring Private VLANs

Private VLANs provide port-based security and isolation of local ports contained
within different private VLAN groups. This switch supports two types of private
VLANs – primary and community groups. A primary VLAN contains promiscuous
ports that can communicate with all other ports in the associated private VLAN
groups, while a community (or secondary) VLAN contains community ports that can
only communicate with other hosts within the community VLAN and with any of the
promiscuous ports in the associated primary VLAN. The promiscuous ports are
designed to provide open access to an external network such as the Internet, while
the community ports provide restricted access to local users.
Multiple primary VLANs can be configured on this switch, and multiple community
VLANs can be associated with each primary VLAN. (Note that private VLANs and
normal VLANs can exist simultaneously within the same switch.)
This section describes commands used to configure private VLANs.
Command
Edit Private VLAN Groups
private-vlan
private-vlan association
Configure Private VLAN Interfaces
switchport mode
private-vlan
switchport private-vlan
host-association
switchport private-vlan
mapping
Display Private VLAN Information
show vlan private-vlan
Table 4-74 Private VLAN Commands
Function
Adds or deletes primary or community VLANs
Associates a community VLAN with a primary VLAN
Sets an interface to host mode or promiscuous mode
Associates an interface with a secondary VLAN
Maps an interface to a primary VLAN
Shows private VLAN information
4
VLAN Commands
Mode Page
VC 4-233
VC 4-234
IC 4-238
IC 4-238
IC 4-239
NE, 4-239
PE
4-235