LevelOne GTL-2691 - Manual (Page 1134)

C HAPTER 39 | VLAN Commands
Configuring Private VLANs
– 1134 –
E XAMPLE
This example enables forwarding of traffic between uplink ports assigned to
different client sessions.
Console(config)#traffic-segmentation uplink-to-uplink forwarding
Console(config)#
show traffic-
segmentation
This command displays the configured traffic segments.
C OMMAND M ODE
Privileged Exec
E XAMPLE
Console#show traffic-segmentation
Private VLAN Status : Enabled
Uplink-to-Uplink Mode : Forwarding
Session Uplink Ports Downlink Ports
--------- ------------------------------ -----------------------------
1 Ethernet 1/1 Ethernet 1/2
Ethernet 1/3
Ethernet 1/4
Console#
C ONFIGURING P RIVATE VLAN S
Private VLANs provide port-based security and isolation of local ports
contained within different private VLAN groups. This switch supports two
types of private VLANs – primary and community groups. A primary VLAN
contains promiscuous ports that can communicate with all other ports in
the associated private VLAN groups, while a community (or secondary)
VLAN contains community ports that can only communicate with other
hosts within the community VLAN and with any of the promiscuous ports in
the associated primary VLAN. The promiscuous ports are designed to
provide open access to an external network such as the Internet, while the
community ports provide restricted access to local users.
Multiple primary VLANs can be configured on this switch, and multiple
community VLANs can be associated with each primary VLAN. (Note that
private VLANs and normal VLANs can exist simultaneously within the same
switch.)
This section describes commands used to configure private VLANs.