C
ONFIGURING
THE
S
WITCH
3-192
Web – Click VLAN, 802.1Q VLAN, Port Configuration or Trunk
Configuration. Fill in the required settings for each interface, click Apply.
Figure 3-80. Configuring VLANs per Port
CLI – This example sets port 3 to accept only tagged frames, assigns
PVID 3 as the native VLAN ID, and then sets the switchport mode to
hybrid.
Private VLANs
Private VLANs provide port-based security and isolation between ports
within the assigned VLAN. This switch supports two types of private
VLANs: primary/secondary associated groups, and stand-alone isolated
VLANs. A primary VLAN contains promiscuous ports that can
communicate with all other ports in the private VLAN group, while a
secondary (or community) VLAN contains community ports that can
only communicate with other hosts within the secondary VLAN and with
any of the promiscuous ports in the associated primary VLAN. Isolated
Console(config)#interface ethernet 1/3 4-156
Console(config-if)#switchport acceptable-frame-types tagged 4-227
Console(config-if)#switchport ingress-filtering 4-228
Console(config-if)#switchport native vlan 3 4-229
Console(config-if)#switchport mode hybrid 4-226
Console(config-if)#