Example #4: Viewing IP Subnet and MAC-Based VLAN Associations
console#show vlan association mac
MAC Address | VLAN ID |
00FF.F2A3.8886 | 10 |
console#show vlan association subnet
IP Subnet | IP Mask | VLAN ID |
|
| |||
192.168.25.0 |
| 255.255.255.0 | 10 |
192.168.1.11 |
| 255.255.255.255 | 10 |
Private Edge VLANs
Use the Private Edge VLAN feature to prevent ports on the switch from forwarding traffic to each other even if they are on the same VLAN.
•Protected ports cannot forward traffic to other protected ports in the same group, even if they have the same VLAN membership. Protected ports can forward traffic to unprotected ports.
•Unprotected ports can forward traffic to both protected and unprotected ports.
You can also configure groups of protected ports, but unprotected ports are independent and cannot be added to a group. Each group’s configuration consists of a name and a mask of ports. A port can belong to only one set of protected ports, but an unprotected port can be added to a group as a protected port.
The group name is configurable by the network administrator.
Use the switchport protected command to designate a port as protected. Use the show switchport protected command to display a listing of the protected ports.
Switching Configuration
35
