Filter
Top Products
Command Line Interface
4-254
4
Example
Related Commands
switchport dot1q-tunnel mode (4-252)
Configuring Private VLANs
Private VLANs provide port-based security and isolation between ports within
the assigned VLAN. This switch supports two types of private VLANs: primary/
secondary associated groups, and stand-alone isolated VLANs. A primary VLAN
contains promiscuous ports that can communicate with all other ports in the private
VLAN group, while a secondary (or community) VLAN contains community ports
that can only communicate with other hosts within the secondary VLAN and with any
of the promiscuous ports in the associated primary VLAN. Isolated VLANs, on the
other hand, consist a single stand-alone VLAN that contains one promiscuous port
and one or more isolated (or host) ports. In all cases, the promiscuous ports are
designed to provide open access to an external network such as the Internet, while
the community or isolated ports provide restricted access to local users.
Multiple primary VLANs can be configured on this switch, and multiple community
VLANs can be associated with each primary VLAN. One or more isolated VLANs
can also be configured. (Note that private VLANs and normal VLANs can exist
simultaneously within the same switch.)
This section describes commands used to configure private VLANs.
Console(config)#dot1q-tunnel system-tunnel-control
Console(config)#interface ethernet 1/1
Console(config-if)#switchport dot1q-tunnel mode access
Console(config-if)#interface ethernet 1/2
Console(config-if)#switchport dot1q-tunnel mode uplink
Console(config-if)#end
Console#show dot1q-tunnel
Current double-tagged status of the system is Enabled
The dot1q-tunnel mode of the set interface 1/1 is Access mode, TPID is 0x8100.
The dot1q-tunnel mode of the set interface 1/2 is Uplink mode, TPID is 0x8100.
The dot1q-tunnel mode of the set interface 1/3 is Normal mode, TPID is 0x8100.
The dot1q-tunnel mode of the set interface 1/4 is Normal mode, TPID is 0x8100.
The dot1q-tunnel mode of the set interface 1/5 is Normal mode, TPID is 0x8100.
The dot1q-tunnel mode of the set interface 1/6 is Normal mode, TPID is 0x8100.
The dot1q-tunnel mode of the set interface 1/7 is Normal mode, TPID is 0x8100.
.
.
.
.
The dot1q-tunnel mode of the set interface 1/24 is Normal mode, TPID is 0x8100.
Console#
Table 4-65 Private VLAN Commands
Command Function Mode Page
Edit Private VLAN Groups
private-vlan Adds or deletes primary, community, or isolated VLANs VC 4-256