Virtual LAN Commands

Security VLANs

Each Security Virtual LAN (SVLAN) can contain one or more groups of ports. The group in a SVLAN are only allowed to send and receive packets to groups in the same SVLAN. If a group is not assigned to a specific SVLAN, it remains in the default SVLAN. Unicast packets with unknown destination addresses are sent to all port members in a SVLAN. Broadcast packets (broadcast address ffffffffff) remain within the VBC where they are received and are transmitted to only the ports in an SVLAN that are members of the receiving port VBC.

set-sec-vlan

This command establishes a Security Virtual LAN.

The SVLANs are group-oriented. There are eight groups of ports on the 8116 switch.

Table 10-1

SVLAN Groups

 

 

 

Group a

 

ports 1-2

 

 

 

Group b

 

ports 3-4

 

 

 

Group c

 

ports 5-6

 

 

 

Group d

 

ports 7-8

 

 

 

Group e

 

ports 9-10

 

 

 

Group f

 

ports 11-12

 

 

 

Group g

 

ports 13-14

 

 

 

Group h

 

ports 15-16

 

 

 

10-6

Page 54
Image 54
Allied Telesis at-8116 manual Security VLANs, Set-sec-vlan, Svlan Groups