VLAN C
OMMANDS
32-18
Default Setting
No private VLANs are defined.
No default group exists.
Command Mode
Global Configuration
Command Usage
• A private VLAN provides port-based security and isolation between
ports within the VLAN. Data traffic on the downlink ports can only
be forwarded to, and from, the uplink port. Data cannot pass between
downlink ports in the same private VLAN group, in other private
VLAN groups, nor to ports which do not belong to a private VLAN.
• Up to five private VLAN groups can be defined. The same rules as
stated above apply to each of the specified private VLAN groups.
• Any port can be defined as an uplink port or downlink port, but
cannot configured to serve both roles. A downlink port can only be
defined as a member of one private VLAN group , but an uplink port
can be configured as a member of one or more private VLAN groups.
• Private VLANs and normal VLANs can exist simultaneously within
the same switch. Traffic may pass freely between uplink ports in
private VLANs and ports in normal VLANs.
• Enter the pvlan command without any parameters to enable the
private VLAN functions. Then set the interface members for each
private VLAN group.
•Enter no pvlan to disable private VLAN functions and clear the
configuration settings for all groups, or for a specified group.
Example
This example enables the private VLAN, and then sets port 18 as the
uplink and ports 5-8 as the downlinks.
Console(config)#pvlan
Console(config)#pvlan up-link ethernet 1/18 down-link ethernet
1/1-5
Console(config)#