Configuring VLANs Using Private VLANs
OmniSwitch AOS Release 8 Network Configuration Guide December 2017 page 4-20
You can also specify a range of Secondary VLAN IDs when creating Community VLANs. Use a hyphen
to indicate a contiguous range and a space to separate multiple VLAN ID entries. For example, the
following command creates and associates Community VLANs 20 through 25 to Primary VLAN 200 on
the switch:
-> pvlan 200 secondary 20-25 type community
Specifying a range of Secondary VLAN IDs is not allowed when creating Isolated VLANs. There is only
one Isolated VLAN allowed for each Primary PVLAN.
To remove a Secondary VLAN from the PVLAN, use the no form of the pvlan secondary command. For
example:
-> no pvlan 200 secondary 251
When a Secondary VLAN is deleted, the VLAN ID is removed and all VLAN port associations for that
VLAN are dropped.
To view the PVLAN mapping of Secondary VLANs configured on the switch, use the show pvlan
mapping command. See “Verifying the PVLAN Configuration” on page 4-25 for more information.
Assigning Ports to PVLANs
PVLAN offers Layer 2 data isolation between the devices on the same VLAN. For a PVLAN to operate,
ports or link aggregates must be assigned to the PVLAN. The following port types are configurable for
PVLANs:
• Promiscuous Port
• ISL Port
• Isolated Port
• Community Port
An ISL port can only be assigned to a Primary VLAN. The other port types are determined based on the
type of VLAN associated with the PVLAN to which the port is assigned. For example:
• Ports assigned to a Primary PVLAN are designated as promiscuous ports.
• Ports assigned to a Secondary VLAN configured as a Community VLAN are designated as community
ports.
• Ports assigned to a Secondary VLAN configured as an Isolated VLAN are designated as isolated ports.
The following table defines the communication criteria between the PVLAN port types:
Port Types Isolated Promiscuous Community ISL
Isolated Deny Permit Deny Permit
Promiscuous Permit Permit Permit Permit
Community Deny Permit Deny, except for
ports that belong
to the same
Community.
Permit
To Next Page
Loading...
