Configuring the Switch
3-96
Web – Click VLAN, 802.1Q VLAN, Port Configuration or VLAN Trunk Configuration.
Fill in the required settings for each interface, click Apply.
CLI – This example sets port 3 to accept only tagged frames, assigns PVID 3 as the
native VLAN ID, sets the GARP timers, and then sets the switchport mode to hybrid.
Configuring Private VLANs
Private VLANs provide port-based security and isolation between ports within the
assigned VLAN. Data traffic on downlink ports can only be forwarded to, and from,
uplink ports. (Note that private VLANs and normal VLANs can exist simultaneously
within the same switch.)
Console(config)#interface ethernet 1/3 4-84
Console(config-if)#switchport acceptable-frame-types tagged 4-140
Console(config-if)#switchport ingress-filtering 4-141
Console(config-if)#switchport native vlan 3 4-142
Console(config-if)#switchport mode hybrid 4-140
Console(config-if)#
Uplink Ports
Primary VLAN
(promiscuous ports)
x
Downlink Ports
Secondary VLAN
(private ports)
