ECS4660-28F_Management Guide-R03

C HAPTER 40 | VLAN Commands
Configuring Private VLANs
– 1369 –
COMMAND MODE
VLAN Configuration
COMMAND USAGE
Secondary VLANs provide security for group members. The associated
primary VLAN provides a common interface for access to other network
resources within the primary VLAN (e.g., servers configured with
promiscuous ports) and to resources outside of the primary VLAN (via
promiscuous ports).
EXAMPLE
Console(config-vlan)#private-vlan 2 association 3
Console(config)#
switchport mode
private-vlan
Use this command to set the private VLAN mode for an interface. Use the
no form to restore the default setting.
SYNTAX
switchport mode private-vlan {host | promiscuous}
no switchport mode private-vlan
host – This port type can subsequently be assigned to a community
VLAN.
promiscuous – This port type can communicate with all other
promiscuous ports in the same primary VLAN, as well as with all the
ports in the associated secondary VLANs.
DEFAULT SETTING
Normal VLAN
COMMAND MODE
Interface Configuration (Ethernet, Port Channel)
COMMAND USAGE
To assign a promiscuous port to a primary VLAN, use the switchport
private-vlan mapping command. To assign a host port to a community
VLAN, use the switchport private-vlan host-association command.
EXAMPLE
Console(config)#interface ethernet 1/2
Console(config-if)#switchport mode private-vlan promiscuous
Console(config-if)#exit
Console(config)#interface ethernet 1/3
Console(config-if)#switchport mode private-vlan host
Console(config-if)#