Zte ZXR10 2900E Series - PVLAN Configuration

ZXR102900ESeriesCongurationGuide
Queue2ShapingRate(Kbps):No-LimitTheBurstSize:N/A
Queue3ShapingRate(Kbps):No-LimitTheBurstSize:N/A
Queue4ShapingRate(Kbps):No-LimitTheBurstSize:N/A
Queue5ShapingRate(Kbps):No-LimitTheBurstSize:N/A
Queue6ShapingRate(Kbps):No-LimitTheBurstSize:N/A
Queue7ShapingRate(Kbps):No-LimitTheBurstSize:N/A
zte(cfg)#shoqostraffic-limitport1
PortIngressTrafficLimitTable:
Flags:DataRate-trafficlimitrate(Kbps),BcEn-EnableBroadcastLimit
KucEn-EnableKnownunicastLimit,McEn-EnableMulticastLimit
TcpSynEn-EnableTCPSYNLimit,UucEn-EnableUnknownunicastLimit
PORTDataRate(Kbps)BcEnKucEnMcEnTcpSynEnUucEn
----------------------------------------------------
port-1200011111
5.13PVLANConguration
PVLANOverview
Toenhancenetworksecurity,itisnecessarytoisolateusers’packets.Atraditionalsolution
istoallocateaVLANforauser.Thissolutionhasobviouslimits,asdescribedbelow.
1.IEEE802.1Qstandardsupports4094VLANsatmost.Thenumberofusersislimited,
whichisnotgoodfornetworkextension.
2.EachVLANcorrespondstoanIPsubnet.ToomanysubnetsbringIPaddresswaste.
3.ToomanyVLANsandIPsubnetsmakeitdifculttomanagenetworks.
ThePrivateVLAN(PVLAN)technologysolvestheseproblems.
APVLANdividesportsinaVLANintohybridports,isolatedports,andcommunityports.
lAhybridportcancommunicatewithanyport.
lAnisolatedportcancommunicateonlywithahybridport,anditcannotcommunicate
withotherisolatedports.
lAcommunityportcancommunicatewithahybridportoranothercommunityportin
thesamesession.
TheportswithinaVLANareseparated.Userscanonlycommunicatewiththeirdefault
gateways,andthenetworksecurityisguaranteed.
TheZXR102900EseriesswitchessupportfourPVLANsessions.EachPVLANsession
supportsanunlimitednumberofhybridports.EachPVLANsupportsanunlimitednumber
ofisolatedorcommunityports.
ConguringPVLAN
ThePVLANcongurationincludesthefollowingcommands:
5-60
SJ-20130731155059-002|2013-11-27(R1.0)ZTEProprietaryandCondential