Configuring Private VLANs
12-17
12
CLI – This example sets port 2 to tunnel mode, indicates that the TPID used for
802.1Q tagged frames will be 9100 hexadecimal, and enables address monitor
mode to pass traffic between the management VLANs and the tunnel port.
Configuring Private VLANs
Private VLANs provide port-based security and isolation between ports within the
assigned VLAN. Data traffic on downlink ports can only be forwarded to, and from,
uplink ports. (Note that private VLANs and normal VLANs can exist simultaneously
within the same switch.)
Enabling Private VLANs
Use the Private VLAN Status page to enable/disable the Private VLAN function.
Web – Click VLAN, Private VLAN, Status. Select Enable or Disable from the
scroll-down box, and click Apply.
Figure 12-9 Private VLAN Status
CLI – This example enables private VLANs.
Console(config)#interface ethernet 1/2 24-1
Console(config-if)#switchport mode dot1q-tunnel 30-21
Console(config-if)#switchport dot1q-ethertype 9100 30-22
Console(config-if)#
Console#sh dot1q-tunnel 30-21
Dot1q-Tunnel Port List
--------
eth 1/2
Total 1 Dot1q-Tunnel Ports, 0 Dot1q-Tunnel Port-Channel
Console#
Console(config)#pvlan 30-14
Console(config)#
Uplink Ports
Primary VLAN
(promiscuous ports)
x
Downlink Ports
Secondary VLAN
(private ports)
To Next Page
Loading...
Need help?
General