CREATING VLANS

Configuring Private VLANs

A Private VLAN allows modification of the default VLAN to provide port-based security and isolation between ports within the VLAN. Data traffic on downlink ports can only be forwarded to, and from, uplink ports. Private VLANs and normal VLANs can exist simultaneously within the same switch. Both individual ports and port trunks can be configured as downlink or uplink interfaces.

Enabling Private VLANs

Use the Private VLAN Status page to enable/disable the Private VLAN function.

Web Interface

Click Private VLAN/Private VLAN Status, then select Enabled/Disabled to enable or disable the Private VLAN function.

Command Line Interface

This example enables private VLANs.

Console(config)#pvlan

3-105

Console(config)#

 

 

 

Configuring Uplink and Downlink Ports

Use the Private VLAN Status and Private VLAN Status Link pages to enable/disable the Private VLAN function and to configure port groups as downlink or uplink ports.

When one port in a group is configured as a downlink or uplink port, all other ports in that group are also configured as downlink or uplink ports. The Web and Command Line Interface however, will only display the explicitly configured port as a downlink or uplink port.

2-59

Page 87
Image 87
SMC Networks SMC7724M/VSW manual Configuring Private VLANs, Enabling Private VLANs, Configuring Uplink and Downlink Ports