Gigabit Ethernet Switch Management Guide

C ONFIGURING THE S WITCH
3-180
CLI – This example sets port 3 to accept only tagged frames, assigns
PVID 3 as the native VLAN ID, enables GVRP, sets the GARP timers,
and then sets the switchport mode to hybrid.
Configuring Private VLANs
Private VLANs provide port-based security and isolation between ports
within the assigned VLAN. Data traffic on downlink ports can only be
forwarded to, and from, uplink ports. (Note that private VLANs and
normal VLANs can exist simultaneously within the same switch.)
Console(config)#interface ethernet 1/3 4-174
Console(config-if)#switchport acceptable-frame-types tagged 4-241
Console(config-if)#switchport ingress-filtering 4-242
Console(config-if)#switchport native vlan 3 4-243
Console(config-if)#switchport gvrp 4-256
Console(config-if)#garp timer join 20 4-257
Console(config-if)#garp timer leave 90
Console(config-if)#garp timer leaveall 2000
Console(config-if)#switchport mode hybrid 4-240
Console(config-if)#
Uplink Ports
Primary VLAN
(promiscuous ports)
x
Downlink Ports
Secondary VLAN
(private ports)