Private VLANs (PVLANs) divide VLANs into “sub-VLANs”. Members of private VLANs must still follow the same rules to communicate with members of other private VLANs. Just as a Layer-3 device is required for inter-VLAN routing, a Layer-3 device is also required for inter-private-VLAN routing. Of course, since the FLEX24-10G is a Layer-3 switch, no additional hardware is required for inter-private-VLAN routing.
Different VLANs normally map to different IP subnets. When we split a VLAN using PVLANs, hosts in different PVLANs still belong to the same IP subnet.
Port isolation prevents interfaces from communicating with any other interfaces regardless of their VLAN or PVLAN membership.
By default, all interfaces on the FLEX24-10G are a member of VLAN 1 and PVLAN 1.
Configuration of Private VLAN Membership and Isolated Ports
An interface can be a member of a single private VLAN or multiple private VLANs at one time
FLEX24-10G# configure terminal
FLEX24-10G(config)# interface GigabitEthernet 1/1
FLEX24-10G(config-if)# pvlan 10
FLEX24-10G(config-if)# pvlan isolation
FLEX24-10G(config-if)# end
FLEX24-10G# copy running-config startup-config
Building configuration...
% Saving 2312 bytes to flash:startup-config
FLEX24-10G#
Refer to the Admin Guide for all the advanced settings available in the switch. You’ll find additional resources like the Datasheet, Admin Guide, A&E spec sheet, etc on the product page here.
For more assistance,
|
Comments
0 comments
Please sign in to leave a comment.