Dell PowerConnect B-RX Configuration Manual page 387

Configuring an isolated or community private VLAN
To configure an isolated or a community private VLAN, use the following CLI methods.
Using the CLI
To configure a community private VLAN, enter commands such as the following.
BigIron RX(config)# vlan 901
BigIron RX(config-vlan-901)# untagged ethernet 3/5 to 3/6
BigIron RX(config-vlan-901)# pvlan type community
These commands create port-based VLAN 901, add ports 3/5 and 3/6 to the VLAN as untagged
ports, then specify that the VLAN is a community private VLAN.
Syntax: untagged ethernet [to <portnum> | ethernet <portnum>]
Syntax: [no] pvlan type community | isolated | primary
The untagged command adds the ports to the VLAN.
The pvlan type command specifies that this port-based VLAN is a private VLAN.
•
•
•
Configuring the primary VLAN
Use the following CLI method to configure the primary VLAN.
Using the CLI
To configure a primary private VLAN, enter commands such as the following.
BigIron RX(config)# vlan 7
BigIron RX(config-vlan-7)# untagged ethernet 3/2
BigIron RX(config-vlan-7)# pvlan type primary
BigIron RX(config-vlan-7)# pvlan mapping 901 ethernet 3/2
These commands create port-based VLAN 7, add port 3/2 as an untagged port, identify the VLAN
as the primary VLAN in a private VLAN, and map the other private VLANs to the ports in this VLAN.
Syntax: untagged ethernet <portnum> [to <portnum> | ethernet <portnum>]
Syntax: [no] pvlan type community | isolated | primary
Syntax: [no] pvlan mapping <vlan-id> ethernet <portnum>
The untagged command adds the ports to the VLAN.
The pvlan type command specifies that this port-based VLAN is a private VLAN. Specify primary as
the type.
BigIron RX Series Configuration Guide
53-1001986-01
community – Broadcasts and unknown unicasts received on community ports are sent to the
primary port and also are flooded to the other ports in the community VLAN.
isolated – Broadcasts and unknown unicasts received on isolated ports are sent only to the
primary port. They are not flooded to other ports in the isolated VLAN.
primary – The primary private VLAN ports are "promiscuous". They can communicate with all
the isolated private VLAN ports and community private VLAN ports in the isolated and
community VLANs that are mapped to the promiscuous port.
11
Private VLANs
315