Configuring the ECN330-switch
3111553-KDU 137 365 Uen D 2006-06-16
CLI – This example shows the ECN330-switch configured with primary VLAN 3
and isolated VLANs 4 and 5. Port 3 has been configured as a promiscuous port
and mapped to VLAN 3, while ports 4 and 5 have been configured as isolated
ports and associated with VLAN 4 and 5 respectively. This means that traffic for
port 4 and 5 can only pass through port 3.
6.12.3 Configuring Protocol-Based VLANs
The network devices required to support multiple protocols cannot be easily
grouped into a common VLAN. This may require non-standard devices to pass
traffic between different VLANs in order to encompass all the devices
participating in a specific protocol. This kind of configuration deprives users of
the basic benefits of VLANs, including security and easy accessibility.
To avoid these problems, configure the ECN330-switch with protocol-based
VLANs that divide the physical network into logical VLAN groups for each
required protocol. When a frame is received at a port, its VLAN membership can
then be determined based on the protocol type being used by the inbound
packets.
Command Usage
To configure protocol-based VLANs, follow these steps:
1. Configure VLAN groups for the protocols to be used (page 284). Although
not mandatory, it is suggested to configure a separate VLAN for each major
protocol running on the network. Do not add port members at this time.
2. Create a protocol group for each of the protocols to be assigned to a VLAN
using the Protocol VLAN Configuration page.
Console(config)#interface ethernet 1/3
Console(config-if)#switchport mode private-vlan promiscuous
Console(config-if)#switchport private-vlan mapping 3
Console(config-if)#exit
Console(config)#interface ethernet 1/4
Console(config-if)#switchport mode private-vlan isolated
Console(config-if)#switchport private-vlan host-association 4
Console(config-if)#exit
Console(config)#interface ethernet 1/5
Console(config-if)#switchport mode private-vlan isolated
Console(config-if)#switchport private-vlan host-association 6
Console(config-if)#