Zte ZXR10 5250 Series - PVLAN Configuration

Chapter5ServiceConguration
zte(cfg)#setqostraffic-limitge-port24data-rate2000
zte(cfg)#setqostraffic-shapingge-port26data-rate20burst-size10
lCongurationVerication
zte(cfg)#showqostraffic-shapingport26
PortEgressTrafficShapingTable:
PortID:26
PortShapingRate(Kbps):20000TheBurstSize:10
Queue0ShapingRate(Kbps):No-LimitTheBurstSize:N/A
Queue1ShapingRate(Kbps):No-LimitTheBurstSize:N/A
Queue2ShapingRate(Kbps):No-LimitTheBurstSize:N/A
Queue3ShapingRate(Kbps):No-LimitTheBurstSize:N/A
Queue4ShapingRate(Kbps):No-LimitTheBurstSize:N/A
Queue5ShapingRate(Kbps):No-LimitTheBurstSize:N/A
Queue6ShapingRate(Kbps):No-LimitTheBurstSize:N/A
Queue7ShapingRate(Kbps):No-LimitTheBurstSize:N/A
zte(cfg)#shoqostraffic-limitport1
PortIngressTrafficLimitTable:
Flags:DataRate-trafficlimitrate(Kbps),BcEn-EnableBroadcastLimit
KucEn-EnableKnownunicastLimit,McEn-EnableMulticastLimit
TcpSynEn-EnableTCPSYNLimit,UucEn-EnableUnknownunicastLimit
PORTDataRate(Kbps)BcEnKucEnMcEnTcpSynEnUucEn
----------------------------------------------------
port-1200011111
5.13PVLANConguration
PVLANOverview
Toenhancenetworksecurity,itisnecessarytoisolateusers’packets.Atraditionalsolution
istoallocateaVLANforauser.Thissolutionhasobviouslimits,asdescribedbelow.
1.IEEE802.1Qstandardsupports4094VLANsatmost.Thenumberofusersislimited,
whichisnotgoodfornetworkextension.
2.EachVLANcorrespondstoanIPsubnet.ToomanysubnetsbringIPaddresswaste.
3.ToomanyVLANsandIPsubnetsmakeitdifculttomanagenetworks.
ThePrivateVLAN(PVLAN)technologysolvestheseproblems.
APVLANdividesportsinaVLANintohybridports,isolatedports,andcommunityports.
lAhybridportcancommunicatewithanyport.
lAnisolatedportcancommunicateonlywithahybridport,anditcannotcommunicate
withotherisolatedports.
lAcommunityportcancommunicatewithahybridportoranothercommunityportin
thesamesession.
TheportswithinaVLANareseparated.Userscanonlycommunicatewiththeirdefault
gateways,andthenetworksecurityisguaranteed.
5-59
SJ-20131111172707-002|2013-11-27(R1.0)ZTEProprietaryandCondential