Configuring Private Vlans; Enabling Private Vlans - SMC Networks 8708L2 - annexe 1 Management Manual

C
ONFIGURING THE
CLI – This example sets port 3 to accept only tagged frames, assigns
PVID 3 as the native VLAN ID, enables GVRP, sets the GARP timers,
and then sets the switchport mode to hybrid.
Console(config)#interface ethernet 1/3
Console(config-if)#switchport acceptable-frame-types tagged
Console(config-if)#switchport ingress-filtering
Console(config-if)#switchport native vlan 3
Console(config-if)#switchport gvrp
Console(config-if)#garp timer join 20
Console(config-if)#garp timer leave 90
Console(config-if)#garp timer leaveall 2000
Console(config-if)#switchport mode hybrid
Console(config-if)#

Configuring Private VLANs

Private VLANs provide port-based security and isolation between ports
within the assigned VLAN. Data traffic on downlink ports can only be
forwarded to, and from, uplink ports. (Note that private VLANs and
normal VLANs can exist simultaneously within the same switch.)

Enabling Private VLANs

Use the Private VLAN Status page to enable/disable the Private VLAN
function.
3-200
S
WITCH
x
Uplink Ports
Primary VLAN
(promiscuous ports)
Downlink Ports
Secondary VLAN
(private ports)
4-170
4-234
4-235
4-236
4-249
4-250
4-233