SMC Networks SMC6224M manual Configuring Private VLANs, 206

COMMAND LINE INTERFACE

Command Mode

Normal Exec, Privileged Exec

Example

The following example shows how to display information for VLAN 1:

Console#show vlan id 1
Vlan ID:	1
Type:	Static
Name:	DefaultVlan
Status:	Active	Eth1/ 4(S) Eth1/ 5(S)
Ports/Port channel:	Eth1/ 1(S) Eth1/ 2(S) Eth1/ 3(S)
	Eth1/ 6(S) Eth1/ 7(S) Eth1/ 8(S)	Eth1/ 9(S) Eth1/10(S)
	Eth1/11(S) Eth1/12(S) Eth1/13(S)	Eth1/14(S) Eth1/15(S)
	Eth1/16(S) Eth1/17(S) Eth1/18(S)	Eth1/19(S) Eth1/20(S)
	Eth1/21(S) Eth1/22(S) Eth1/23(S)	Eth1/24(S) Eth1/25(S)
	Eth1/26(S)
Console#

Configuring Private VLANs

Private VLANs provide port-based security and isolation between ports within the assigned VLAN. This switch supports two types of private VLANs: primary/secondary associated groups, and stand-alone isolated VLANs. A primary VLAN contains promiscuous ports that can communicate with all other ports in the private VLAN group, while a secondary (or community) VLAN contains community ports that can only communicate with other hosts within the secondary VLAN and with any of the promiscuous ports in the associated primary VLAN. Isolated VLANs, on the other hand, consist a single stand-alone VLAN that contains one promiscuous port and one or more isolated (or host) ports. In all cases, the promiscuous ports are designed to provide open access to an external network such as the Internet, while the community or isolated ports provide restricted access to local users.

Multiple primary VLANs can be configured on this switch, and multiple community VLANs can be associated with each primary VLAN. One or more isolated VLANs can also be configured. (Note that private VLANs and normal VLANs can exist simultaneously within the same switch.)

4-206