Hirschmann GigaLION-24TP - Configuring Private Vlans; Enabling Private Vlans; Figure 3-68. Private VLAN Status

VLAN Configuration
3-121
3
CLI – This example sets port 3 to accept only tagged frames, assigns PVID 3 as the
native VLAN ID, enables GVRP, sets the GARP timers, and then sets the switchport
mode to hybrid.
Configuring Private VLANs
Private VLANs provide port-based security and isolation between ports within the
assigned VLAN. Data traffic on downlink ports can only be forwarded to, and from,
uplink ports. (Note that private VLANs and normal VLANs can exist simultaneously
within the same switch.)
Enabling Private VLANs
Use the Private VLAN Status page to enable/disable the Private VLAN function.
(Default: Disabled)
Web – Click VLAN, Private VLAN, Status. Select Enable or Disable from the
scroll-down box, and click Apply.
Figure 3-68. Private VLAN Status
CLI – This example enables private VLANs.
Console(config)#interface ethernet 1/3 4-123
Console(config-if)#switchport acceptable-frame-types tagged 4-174
Console(config-if)#switchport ingress-filtering 4-175
Console(config-if)#switchport native vlan 3 4-176
Console(config-if)#switchport gvrp 4-186
Console(config-if)#garp timer join 20 4-187
Console(config-if)#garp timer leave 90 4-187
Console(config-if)#garp timer leaveall 2000 4-187
Console(config-if)#switchport mode hybrid 4-174
Console(config-if)#
Console(config)#pvlan 4-180
Console(config)#
Uplink Ports
Primary VLAN
(promiscuous ports)
x
Downlink Ports
Secondary VLAN
(
private ports
)