D-Link xStack DGS-3400 Series Reference Manual page 271

xStack
config private_vlan
Purpose
Syntax
Description
Parameters
Restrictions
Example usage:
To associate a secondary VLAN to private VLAN p1:
DGS-3450:admin#config private_vlan p1 add community vlanid 2-5
Command: config private_vlan p1 add community vlanid 2-5
Success.
DGS-3450:admin#
show private_vlan
Purpose
Syntax
Description
Parameters
®
DGS-3400 Series Layer 2 Gigabit Ethernet Managed Switch CLI Manual
Used to configure the private VLAN feature.
config private_vlan [<vlan_name 32> | vid <vlanid 1-4094>] [add [isolated | community]
| remove] [<vlan_name 32> | vlanid <vidlist>]
A private VLAN is comprised of a primary VLAN, up to one isolated VLAN, and a number of
community VLANs. A private VLAN ID is presented by the VLAN ID of the primary VLAN.
The command used to associate or de-associate a secondary VLAN with a primary VLAN. A
primary VLAN is created via the command create vlan type private_vlan. A secondary VLAN
is created via the command create vlan type 1q_vlan. A secondary VLAN cannot be
associated with multiple primary VLANs. The untagged member port of the primary VLAN is
named as the promiscuous port. The tagged member port of the primary VLAN is named as
the trunk port. A promiscuous port of a private VLAN cannot be promiscuous port of other
private VLANs. The primary VLAN member port cannot be a secondary VLAN member at the
same time, or vice versa. A secondary VLAN can only have the untagged member port. The
member port of a secondary VLAN cannot be member port of other secondary VLAN at the
same time. When a VLAN is associated with a primary VLAN as the secondary VLAN, the
promiscuous port of the primary VLAN will behave as the untagged member of the secondary
VLAN, and the trunk port of the primary VLAN will behave as the tagged member of the
secondary VLAN. A secondary VLAN cannot be specified with advertisement. Only the
primary VLAN can be configured as a layer 3 interface. The private VLAN member port
cannot be configured with the traffic segmentation function.
<vlan_name 32> - Specify the name of the private VLAN. The maximum length is 32
characters.
vid <vlanid 1-4094> - Specify the VLAN ID of the private VLAN.
add - Specify to add isolated or community.
isolated - Specify the secondary VLAN as an isolated VLAN.
community - Specify the secondary VLAN as a community VLAN.
remove - Specify to remove the specified private VLAN.
<vlan_name 32> - Specify the VLAN of a range of secondary VLANs to add to the private
VLAN or remove from it. The maximum length is 32 characters.
vlanid <vidlist> - Specify a range of the second VLAN IDs to add to the private VLAN or
remove from it.
Only Administrator and Operator-level users can issue this command.
Used to display private VLAN information on the switch.
show private_vlan {[<vlan_name 32> | vlanid <vidlist>]}
This command is used to display private VLAN information on the switch.
<vlan_name 32> - Specify the name of the private VLAN. The maximum length is 32
characters.
vlanid <vidlist> - Specify the VLAN ID of the private VLAN.
267