ECS4660-28F_Management Guide-R03

C HAPTER 40 | VLAN Commands
Configuring Private VLANs
– 1366 –
Console#
show
vlan-translation
This command displays the configuration settings for VLAN translation.
SYNTAX
show vlan-translation [interface interface]
interface
ethernet unit/port
unit - Stack unit. (Range: 1)
port - Port number. (Range: 1-28)
COMMAND MODE
Privileged Exec
EXAMPLE
Console#show vlan-translation
Interface Old VID New VID
--------- ------- -------
Eth 1/ 1 10 100
Console#
CONFIGURING PRIVATE VLANS
Private VLANs provide port-based security and isolation of local ports
contained within different private VLAN groups. This switch supports two
types of private VLANs – primary and community groups. A primary VLAN
contains promiscuous ports that can communicate with all other ports in
the associated private VLAN groups, while a community (or secondary)
VLAN contains community ports that can only communicate with other
hosts within the community VLAN and with any of the promiscuous ports in
the associated primary VLAN. The promiscuous ports are designed to
provide open access to an external network such as the Internet, while the
community ports provide restricted access to local users.
Multiple primary VLANs can be configured on this switch, and multiple
community VLANs can be associated with each primary VLAN. (Note that
private VLANs and normal VLANs can exist simultaneously within the same
switch.)
This section describes commands used to configure private VLANs.