Installation manual

4-259
SIGNAMAX LLC • www.signamax.eu
To configure primary/secondary associated groups, follow these steps:
1. Use the private-vlan command to designate one or more community VLANs and the
primary VLAN that will channel traffic outside of the community groups.
2. Use the private-vlan association command to map the community VLAN(s) to the
primary VLAN.
3. Use the switchport mode private-vlan command to configure ports as
promiscuous (i.e., having access to all ports in the primary VLAN) or host (i.e.,
community port).
4. Use the switchport private-vlan host-association command to assign a port to a
secondary VLAN.
5. Use the switchport private-vlan mapping command to assign a port to a primary
VLAN.
6. Use the show vlan private-vlan command to verify your configuration settings.
private-vlan
Use this command to create a primary or community private VLAN. Use the no form to
remove the specified private VLAN.
Syntax
private-vlan vlan-id {community | primary}
no private-vlan vlan-id
• vlan-id - ID of private VLAN. (Range: 1-4092, no leading zeroes).
• community - A VLAN in which traffic is restricted to host members in the same
VLAN and to promiscuous ports in the associate primary VLAN.
• primary - A VLAN which can contain one or more community VLANs, and
serves to channel traffic between community VLANs and other locations.
Default Setting
None
Command Mode
VLAN Configuration
Command Usage
• Private VLANs are used to restrict traffic to ports within the same community, and
channel traffic passing outside the community through promiscuous ports. When
Display Private VLAN Information
show vlan private-vlan Shows private VLAN information NE,
PE
4-263
Table 4-72 Private VLAN Commands (Continued)
Command Function Mode Page