Configuring PVLAN
By default, the Private VLAN is disabled. To configure a PVLAN, follow these steps:
- Create the secondary VLANs, i.e. isolated VLAN or community VLAN.
- Create the primary VLAN.
- Associate the secondary VLAN with the primary VLAN. (Only one isolated VLAN can be associated with a primary VLAN, but more than one community VLAN can be associated with a primary VLAN).
- Configure the port connected to the host or the downlink devices as a PVLAN host port or secondary trunk port.
- Configure the port connected to the uplink device as a PVLAN promiscuous port or promiscuous trunk port.
- Add PVLAN ports to the private VLAN and set the native VLAN of the port as the private VLAN.
- Verify PVLAN configurations.
Procedure
Step1 Create the secondary VLANs.
set vlans vlan-id <vlan-id> private-vlan mode community
set vlans vlan-id <vlan-id> private-vlan mode isolated
Step2 Create the primary VLAN.
set vlans vlan-id <vlan-id> private-vlan mode primary
Step3 Associate the secondary VLAN with the primary VLAN.
set vlans vlan-id <vlan-id> private-vlan association <secondary-vlan-list>
Step4 Configure the port connected to the uplink device as a promiscuous port or promiscuous trunk port.
set interface gigabit-ethernet <interface-name> family ethernet-switching port-mode <port-mode>
Step5 Configure the port connected to the host or the downlink device as a host port or secondary trunk port.
set interface gigabit-ethernet <interface-name> family ethernet-switching port-mode <port-mode>
Step6 Add the PVLAN ports to the private VLAN and set the native VLAN of the port as the private VLAN.
set interface gigabit-ethernet <port> family ethernet-switching native-vlan-id <vlan-id>
Step7 Commit the configurations.
Commit
Copyright © 2024 Pica8 Inc. All Rights Reserved.