Accton Technology ES3528M-SFP manual Configuring Private VLANs, Switchport dot1q-tunnel mode, 256

4 Command Line Interface

Example

Console(config)#dot1q-tunnel system-tunnel-control

Console(config)#interface ethernet 1/1

Console(config-if)#switchport dot1q-tunnel mode access

Console(config-if)#interface ethernet 1/2

Console(config-if)#switchport dot1q-tunnel mode uplink

Console(config-if)#end

Console#show dot1q-tunnel

Current double-tagged status of the system is Enabled

The dot1q-tunnel mode of the set interface 1/1 is Access mode, TPID is 0x8100. The dot1q-tunnel mode of the set interface 1/2 is Uplink mode, TPID is 0x8100. The dot1q-tunnel mode of the set interface 1/3 is Normal mode, TPID is 0x8100. The dot1q-tunnel mode of the set interface 1/4 is Normal mode, TPID is 0x8100. The dot1q-tunnel mode of the set interface 1/5 is Normal mode, TPID is 0x8100. The dot1q-tunnel mode of the set interface 1/6 is Normal mode, TPID is 0x8100. The dot1q-tunnel mode of the set interface 1/7 is Normal mode, TPID is 0x8100.

.

.

.

.

The dot1q-tunnel mode of the set interface 1/24 is Normal mode, TPID is 0x8100. Console#

Related Commands

switchport dot1q-tunnel mode (4-252)

Configuring Private VLANs

Private VLANs provide port-based security and isolation between ports within the assigned VLAN. This switch supports two types of private VLANs: primary/ secondary associated groups, and stand-alone isolated VLANs. A primary VLAN contains promiscuous ports that can communicate with all other ports in the private VLAN group, while a secondary (or community) VLAN contains community ports that can only communicate with other hosts within the secondary VLAN and with any of the promiscuous ports in the associated primary VLAN. Isolated VLANs, on the other hand, consist a single stand-alone VLAN that contains one promiscuous port and one or more isolated (or host) ports. In all cases, the promiscuous ports are designed to provide open access to an external network such as the Internet, while the community or isolated ports provide restricted access to local users.

Multiple primary VLANs can be configured on this switch, and multiple community VLANs can be associated with each primary VLAN. One or more isolated VLANs can also be configured. (Note that private VLANs and normal VLANs can exist simultaneously within the same switch.)

This section describes commands used to configure private VLANs.

Table 4-65 Private VLAN Commands

Command	Function	Mode	Page
Edit Private VLAN Groups
private-vlan	Adds or deletes primary, community, or isolated VLANs	VC	4-256

4-254