SMC Networks SMC6752AL2 manual Private VLANs, 158

CONFIGURING THE SWITCH

CLI – This example sets port 3 to accept only tagged frames, assigns PVID 3 as the native VLAN ID, enables GVRP, sets the GARP timers, and then sets the switchport mode to hybrid.

Console(config)#interface ethernet	1/3	4-145
Console(config-if)#switchport acceptable-frame-types tagged		4-203
Console(config-if)#switchport ingress-filtering		4-204
Console(config-if)#switchport native vlan 3		4-205
Console(config-if)#switchport gvrp		4-219
Console(config-if)#garp timer join	20	4-220
Console(config-if)#garp timer leave 90		4-220
Console(config-if)#garp timer leaveall 2000		4-220
Console(config-if)#switchport mode	hybrid	4-202
Console(config-if)#

Private VLANs

Private VLANs provide port-based security and isolation between ports within the assigned VLAN. This switch supports three types of private VLAN ports: promiscuous, isolated, and community ports. A promiscuous port can communicate with all interfaces within a private VLAN. An isolated port can only communicate with promiscuous ports within its own VLAN. Community ports can only communicate with other ports in their own community VLAN, and with their designated promiscuous ports. (Note that private VLANs and normal VLANs can exist simultaneously within the same switch.)

Each private VLAN consists of two components: a primary VLAN and one or more community VLANs. A primary VLAN allows traffic to pass between promiscuous ports, and between promiscuous ports and community ports subordinate to the primary VLAN. A community VLAN conveys traffic between community ports, and from the community ports to their associated promiscuous ports. Multiple primary VLANs can be configured on this switch, and multiple community VLANs can be configured within each primary VLAN.

3-158