Configuring PVLAN
By default, the Private VLAN is disabled. To configure a PVLAN, follow these steps:
- Create the secondary VLANs, i.e. isolated VLAN or community VLAN.
- Create the primary VLAN.
- Associate the secondary VLAN with the primary VLAN. (Only one isolated VLAN can be associated with a primary VLAN, but more than one community VLAN can be associated with a primary VLAN).
- Configure the port connected to the host or the downlink devices as a PVLAN host port or secondary trunk port.
- Configure the port connected to the uplink device as a PVLAN promiscuous port or promiscuous trunk port.
- Add PVLAN ports to the private VLAN and set the native VLAN of the port as the private VLAN.
- Verify PVLAN configurations.
Procedure
Step1Â Â Â Â Â Â Â Â Â Create the secondary VLANs.
  set vlans vlan-id <vlan-id> private-vlan mode community
  set vlans vlan-id <vlan-id> private-vlan mode isolated
Step2Â Â Â Â Â Â Â Â Â Create the primary VLAN.
  set vlans vlan-id <vlan-id> private-vlan mode primary
Step3Â Â Â Â Â Â Â Â Â Associate the secondary VLANÂ with the primary VLAN.
  set vlans vlan-id <vlan-id> private-vlan association <secondary-vlan-list>
Step4Â Â Â Â Â Â Â Â Â Configure the port connected to the uplink device as a promiscuous port or promiscuous trunk port.
  set interface gigabit-ethernet <interface-name> family ethernet-switching port-mode <port-mode>
Step5Â Â Â Â Â Â Â Â Â Configure the port connected to the host or the downlink device as a host port or secondary trunk port.
  set interface gigabit-ethernet <interface-name> family ethernet-switching port-mode <port-mode>
Step6Â Â Â Â Â Â Add the PVLAN ports to the private VLAN and set the native VLAN of the port as the private VLAN.
  set interface gigabit-ethernet <port> family ethernet-switching native-vlan-id <vlan-id>
Step7Â Â Â Â Â Â Â Â Â Commit the configurations.
          Commit
Copyright © 2024 Pica8 Inc. All Rights Reserved.