C
OMMAND
L
INE
I
NTERFACE
3-134
Command Mode
VLAN Configuration
Command Usage
Secondary VLANs provide security for group members. The associated
primary VLAN provides a common interface for access to other
network resources within the primary VLAN (e.g., servers configured
with promiscuous ports) and to resources outside of the primary
VLAN (via promiscuous ports).
Example
switchport mode private-vlan
Use this command to set the private VLAN mode for an interface. Use the
no
form to restore the default setting.
Syntax
switchport mode private-vlan
{
host
|
isolated
|
promiscuous
}
no switchport mode private-vlan
•
host
– This port type can communicate with all other host ports
assigned to the same secondary VLAN. All communications outside
of this VLAN must pass through a promiscuous port in the
associated primary VLAN.
•
isolated
– The port is an isolated port that can only communicate
with promiscuous ports within its own isolated VLAN.
•
promiscuous
– This port type can communicate with all other
promiscuous ports in the same primary VLAN, as well as with all the
ports in the associated secondary VLANs.
Default Setting
Normal VLAN
Console(config-vlan)#private-vlan 2 association 3
Console(config)#
Summary of Contents for 6724AL2
Page 2: ......
Page 404: ...COMMAND LINE INTERFACE 3 216 ...
Page 406: ...TROUBLESHOOTING A 2 ...
Page 418: ...GLOSSARY Glossary 8 ...
Page 422: ...INDEX Index 4 ...
Page 423: ......
