Configuring A Private Vlan - Dell PowerConnect B-RX Configuration Manual

11
Private VLANs
•

Configuring a private VLAN

To configure a private VLAN, configure each of the component VLANs (isolated, community, and
public) as a separate port-based VLAN:
•
•
•
Configuration rules
•
•
•
•
•
•
•
•
•
Configuring an isolated or community private VLAN
To configure an isolated or a community private VLAN, use the following CLI methods.
Using the CLI
To configure a community private VLAN, enter commands such as the following.
316
A primary VLAN can have multiple ports. All these ports are active, but the ports that will be
used depends on the private VLAN mappings. Also, secondary VLANs (isolated and community
VLANs) can be mapped to multiple primary VLAN ports. For example:
pvlan mapping 901 ethernet 1/2
pvlan mapping 901 ethernet 2/2
pvlan mapping 901 ethernet 3/2
Use standard VLAN configuration commands to create the VLAN and add ports.
Identify the type private VLAN type (isolated, community, or public)
For the primary VLAN, map the other private VLANs to the ports in the primary VLAN
NOTE
Although a private VLAN resides within a port-based VLAN, the VLAN is considered to be
exclusively a private VLAN, not a port-based VLAN.
You cannot use the private VLAN feature and the dual-mode VLAN port feature on the same
device.
The Spanning Tree Protocol (STP) is independent of this feature, and can be enabled or
disabled in the individual port-based VLANs. However, private VLANs are not supported with
single-instance STP ("single span").
You can configure only one private VLAN within a given port-based VLAN. Thus, you must
configure a separate port-based VLAN for each private VLAN.
Each private VLAN can have only one primary VLAN and can not belong LACP ports.
Each private VLAN can have multiple isolated or community VLANs. You can use any
combination of isolated or community VLANs with the primary VLAN. You do not need to use
both isolated and community VLANs in the private VLAN.
You can configure the primary VLAN before or after you configure the community or isolated
VLANs. You are not required to configure a specific type of private VLAN before you can
configure the other types.
The ports in all three types of private VLANs can be untagged.
The primary VLAN has only one active port. The primary VLAN can have more than one port,
but only the lowest-numbered available port is active. The other ports provide redundancy.
You cannot configure the default VLAN (VLAN 1) as a private VLAN.
BigIron RX Series Configuration Guide
53-1002253-01