Install guide

20 Release Note
Software Release 2.6.4
C613-10404-00 REV A
Each private or uplink port:
■ May be tagged or untagged, but can only be an untagged member of one
port-based VLAN
■ May be trunked with other ports of the same type
Private VLANs on Rapier 48i Switches
The ports on Rapier 48i switches are divided into two instances:
■ ports 1-24 plus uplink port 49
■ ports 25-48 plus uplink port 50
Private VLANs on a Rapier 48i switch can only consist of ports from one
instance. Both the private ports and the uplink port must be in the same
instance.
Configuring Private VLANs
To create a private VLAN and add ports to it:
1. Create the VLAN
To create a VLAN and specify that it is private, use the command:
CREATE VLAN=vlan-name VID=2..4094 PRIVATE
2. Add the uplink port or trunk group
To add the uplink to a private VLAN, use one of the commands:
ADD VLAN={vlan-name|1..4094} PORT=port-list
[FRAME={UNTAGGED|TAGGED}] UPLINK
where portlist is either a single port number for a single uplink port, or a
list of port numbers for a trunk group. If you are adding a trunk group to
the VLAN as an uplink, the ports must already be trunked together, and
you must specify all the ports.
3. Add the private ports
To add a private port or ports to a private VLAN, use one of the
commands:
ADD VLAN={vlan-name|1..4094} PORT={port-list|ALL}
[FRAME={UNTAGGED|TAGGED}] [GROUP]
The GROUP parameter specifies that the listed ports may communicate
with each other, but not with any other private ports in the VLAN.
To delete ports from a private VLAN:
To delete private ports from a private VLAN, use one of the commands:
DELETE VLAN={vlan-name|1..4094} PORT=port-list
DELETE VLAN={vlan-name|1..4094} PORT=ALL
A private VLAN cannot contain any private ports when an uplink is
deleted from the VLAN, because a private VLAN must always have an
uplink. To delete the uplink port or ports and any private ports from a
private VLAN, use the PORT=ALL option in the above command.
If the port is a member of a private group, you must delete all ports in the
group at once. This stops groups from having different member ports in
different VLANs.