VLAN Configuration 3

Community VLAN – A community VLAN conveys traffic between community ports, and from community ports to their designated promiscuous ports. Set PVLAN Port Type to “Host,” and then specify the associated Community VLAN.

Isolated VLAN – Conveys traffic only between the VLAN’s isolated ports and the promiscuous port. Traffic between isolated ports within the VLAN is blocked. Set the PVLAN Port Type to “Host,” then specify an isolated VLAN by marking the check box for an “Isolated VLAN,” and selecting the required VLAN from the drop-down box.

Web – Click VLAN, Private VLAN, Port Configuration or Trunk Configuration. Set the PVLAN Port Type for each port that will join a private VLAN. Assign promiscuous ports to a primary or isolated VLAN. Assign host ports to a community or isolated VLAN. After all the ports have been configured, click Apply.

Figure 3-87 Private VLAN Port Configuration

CLI – This example shows the switch configured with primary VLAN 5 and secondary VLAN 6. Port 3 has been configured as a promiscuous port and mapped to VLAN 5, while ports 4 and 5 have been configured as a host ports and associated with VLAN 6. This means that traffic for port 4 and 5 can only pass through port 3.

Console(config)#interface ethernet

1/3Console(config-if)#switchport mode

private-vlan promiscuous

 

4-191

Console(config-if)#switchport private-vlan mapping 5

4-193

Console(config-if)#exit

 

 

Console(config)#interface ethernet

1/4

 

Console(config-if)#switchport mode

private-vlan host

4-191

Console(config-if)#switchport private-vlan host-association 6

4-191

Console(config-if)#exit

 

 

Console(config)#interface ethernet

1/5

 

Console(config-if)#switchport mode

private-vlan host

 

Console(config-if)#switchport private-vlan host-association 6 Console(config-if)#

3-157

Page 201
Image 201
Accton Technology ES3552XA, ES3526XA manual Private Vlan Port Configuration, 191