Home » Netgear Manuals » Hubs & Switches » Netgear GSM7252PS » Manual Viewer

Netgear GSM7252PS 7000 Series Managed Switch Administration Guide for Software - Page 401

Private VLAN Groups

UPC - 606449071665

Add to My Manuals
Save this manual to your list of manuals

Page 401 highlights

ProSafe 7000 Managed Switch Software Administration Manual, Release 8.0.3 Chapter 22 Private VLAN Groups The private VLAN Group allows network administrator to create groups of users within a VLAN that cannot communicate with members in different groups but only within the same group. There are two modes for the private group. The mode can be either "isolated" or "community." When in "isolated" mode, the member port in the group cannot forward its egress traffic to any other members in the same group. By default, the mode is "community" mode that each member port can forward traffic to other members in the same group, but not to members in other groups. The following examples shows how to create a private group. Create a Private VLAN Group The following example creates two groups. the group1 is in "community" mode and the group2 is in "isolated" mode. Internet Port 1/0/13 Layer 2 Switch Port 1/0/6 Port 1/0/7 Port 1/0/17 Port 1/0/16 Group 1 Figure 22-1 22-1 Group 2 v1.0, June 2010 Private VLAN Groups

Section	Page
ProSafe 7000 Managed Switch Software Administration Manual, Release 8.0.3	1
Contents	3
About This Manual	9
Chapter 1 Virtual LANs	10
Create Two VLANs	11
CLI: Creating Two VLANS	11
Web Interface: Creating Two VLANS	11
Assign Ports to VLAN2	13
CLI: Assigning Ports to VLAN2	13
Web Interface: Assigning Ports to VLAN2	13
Assign Ports to VLAN3	14
CLI: Assigning Ports to VLAN3	15
Web Interface: Assigning Ports to VLAN3	15
Assign VLAN3 as the Default VLAN for Port 1/0/2	16
CLI: Assigning VLAN3 as the Default VLAN for Port 1/0/2	16
Web Interface: Assigning VLAN3 as the Default VLAN for Port 1/0/2	16
Creating a MAC-based VLAN	17
CLI: Creating a MAC-Based VLAN	18
Web Interface Procedure: Assigning a MAC-Based VLAN	19
Create a Protocol-Based VLAN	21
CLI: Creating a Protocol-based VLAN	21
Web Interface: Creating a Protocol-based VLAN	22
Virtual VLANs: Create an IP Subnet Based VLAN	24
CLI: Creating an IP Subnet Based VLAN	25
Web Interface: Creating an IP Subnet Based VLAN	26
Voice VLAN	28
CLI: Configuring Voice VLAN and Prioritizing Voice Traffic	29
Web Interface: Voice VLAN and Prioritizing Voice Traffic	30
Chapter 2 Link Aggregation	40
Create Two LAGs	41
CLI: Creating Two LAGs	41
Web Interface: Creating Two LAGs	42
Add the Ports to the LAGs	42
CLI: Adding the Ports to the LAGs	43
Web Interface: Adding the Ports to the LAGs	43
Enable Both LAGs	44
CLI: Enabling Both LAGs	44
Web Interface: Enabling Both LAGs	45
Chapter 3 Port Routing	46
Port Routing Configuration	46
Enable Routing for the Switch	47
CLI: Enabling Routing for the Switch	48
Web Interface: Enabling Routing for the Switch	48
Enable Routing for Ports on the Switch	48
CLI: Enabling Routing for Ports on the Switch	49
Web Interface: Enabling Routing for Ports on the Switch	49
Adding a Default Route	51
CLI: Add a Default Route	52
Web Interface: Add a Default Route	52
Adding a Static Route	53
CLI Command Procedure:	53
Web Interface Procedure	53
Chapter 4 VLAN Routing	55
Create Two VLANs	55
CLI: Creating Two VLANs	56
Web Interface: Creating Two VLANs	57
Set Up VLAN Routing for the VLANs and the Switch	60
CLI: Setting Up VLAN Routing for the VLANs and the Switch	60
Web Interface: Setting Up VLAN Routing for the VLANs and the Switch	61
Chapter 5 Routing Information Protocol	63
Enable Routing for the Switch	64
CLI: Enabling Routing for the Switch	64
Web Configuration: Enabling Routing for the Switch	64
Enable Routing for Ports	65
CLI: Enabling Routing for Ports	65
Web Interface: Enabling Routing for the Ports	65
Enable RIP for the Switch	67
CLI: Enabling RIP for the Switch	68
Web Interface: Enabling RIP on the Switch	68
Enable RIP for Ports 1/0/2 and 1/0/3	68
CLI: Enabling RIP for Ports 1/0/2 and 1/0/3	68
Web Interface: Enabling RIP for Ports 1/0/2 and 1/0/3	69
VLAN Routing RIP Configuration	70
CLI: VLAN Routing RIP Configuration	72
Web Interface: VLAN Routing RIP Configuration	73
Chapter 6 OSPF	76
Configure an Inter-Area Router	77
CLI: Configuring an Inter-Area Router	77
Web Interface: Configuring an Inter-Area Router	78
Configure OSPF on a Border Router	83
CLI: Configuring OSPF on a Border Router	83
Web Interface: Configuring OSPF on a Border Router	85
Configure Area 1 as a Stub Area	90
CLI: Configuring Area 1 as a Stub Area on A1	91
Web Interface: Configuring Area 1 as a Stub Area on A1	92
CLI: Configuring Area 1 as a Stub Area on A2	96
Web Interface: Configuring Area 1 as a Stub Area on A2	97
Configure Area 1 as a nssa Area	99
CLI: Configuring Area 1 as a nssa Area	100
Web Interface: Configuring Area 1 as a nssa Area on A1	101
CLI: Configuring Area 1 as a nssa Area on A2	105
Web Interface: Configuring Area 1 as a nssa Area on A2	106
VLAN Routing OSPF Configuration	110
CLI: VLAN Routing OSPF Configuration	111
Web Interface: VLAN Routing OSPF Configuration	112
OSPFv3 (Open Shortest Path First)	115
CLI: Configuring OSPFv3	116
Chapter 7 Proxy Address Resolution Protocol (ARP)	122
Proxy ARP Examples	122
CLI: show ip interface	122
CLI: ip proxy-arp	123
Web Interface: Configuring Proxy ARP on a Port	123
Chapter 8 Virtual Router Redundancy Protocol	124
Configure VRRP on a Master Router	125
CLI: Configuring VRRP on a Master Router	125
Web Interface: Configuring VRRP on a Master Router	126
Configure VRRP on a Backup Router	127
CLI: Configuring VRRP on a Backup Router	128
Web Interface: Configuring VRRP on a Backup Router	129
Chapter 9 Access Control Lists (ACLs)	131
MAC ACLs	131
Configuring IP ACLs	132
Process	132
Set up an IP ACL with Two Rules	133
CLI: Setting up an IP ACL with Two Rules	133
Web Interface: Setting up an IP ACL with Two Rules	134
Configure a One-Way Access Using a TCP Flag in an ACL	138
CLI: Configuring a One-Way Access Using a TCP Flag in an ACL	138
Web Interface: Configuring a One-Way Access Using a TCP Flag in an ACL	141
Configure Isolated VLANs on a Layer 3 Switch by Using ACLs	156
CLI: Configuring a One-Way Access Using a TCP Flag in an ACL Commands	157
Web Interface: Configuring a One-Way Access Using a TCP Flag in an ACL	159
Set up a MAC ACL with Two Rules	169
CLI: Setting up a MAC ACL with Two Rules	169
Web Interface: Setting up a MAC ACL with Two Rules	170
ACL Mirroring	173
CLI: Configuring ACL Mirroring	174
Web Interface: Configuring ACL Mirroring	175
ACL Redirect	179
CLI: Redirecting a Traffic Stream	179
Web Interface: Redirecting	180
Configure IPv6 ACLs	185
CLI: Configuring an IPv6 ACL	186
Web Interface: Configuring an IPv6 ACL	188
Chapter 10 Class of Service (CoS) Queuing	194
CoS Queue Mapping	194
Trusted Ports	194
Untrusted Ports	195
CoS Queue Configuration	195
Show classofservice Trust	196
CLI: Showing classofservice trust	196
Web Interface: Showing classofservice Trust	196
Set classofservice trust Mode	196
CLI: Setting classofservice Trust Mode	197
Web Interface: Setting classofservice Trust Mode	197
Show classofservice ip-precedence Mapping	198
CLI: Showing classofservice ip-precedence Mapping	198
Web Interface: Showing classofservice ip-precedence Mapping	198
Configure Cos-queue Min-bandwidth and Strict Priority Scheduler Mode	199
CLI: Configuring Cos-queue Min-bandwidth and Strict Priority Scheduler Mode	199
Web Interface: Configuring CoS-queue Min-bandwidth and Strict Priority Scheduler Mode	199
Set CoS Trust Mode of an Interface	201
CLI: Setting CoS Trust Mode of an Interface	201
Web Interface: Setting CoS Trust Mode of an Interface	202
Configure Traffic Shaping	202
CLI: Configuring traffic-shape	203
Web Interface: Configuring Traffic-shape	203
Chapter 11 Differentiated Services	205
Differentiated Services	206
CLI: DiffServ	206
Web Interface: DiffServ	208
DiffServ for VoIP Configuration	224
CLI: DiffServ for VoIP	225
Web Interface: Diffserv for VoIP	226
Auto VoIP Configuration	233
CLI: Configuring Auto VoIP	233
Web Interface: Configuring Auto-VoIP	234
DiffServ for IPv6 Configuration Example	237
CLI: Configuring DiffServ for IPv6	237
Web Interface: Configuring DiffServ for IPv6	238
Color Conform Policy Configuration	245
CLI: Configuring a Color Conform Policy	246
Web Interface: Configuring a Color Conform Policy	247
Chapter 12 IGMP Snooping and Querier	255
Enable IGMP Snooping	255
CLI: Enabling IGMP Snooping	255
Web Interface: Enabling IGMP Snooping	255
Show igmpsnooping	256
CLI: Showing igmpsnooping	256
Web Interface: Showing igmpsnooping	256
Show mac-address-table igmpsnooping	257
CLI: Showing mac-address-table igmpsnooping	257
Web Interface: Showing mac-address-table igmpsnooping	258
Configure the Switch with an External Multicast Router	258
CLI: Configuring the Switch with an External Multicast Router	258
Web Interface: Configuring the Switch with an External Multicast Router	258
Configure the Switch with a Multicast Router Using VLAN	259
CLI: Configure the Switch with a Multicast Router Using VLAN	259
Web Interface: Configuring the Switch with a Multicast Router Using VLAN	260
IGMP Querier	261
Enable IGMP Querier	261
CLI: Enabling IGMP Querier	262
Web Interface: Enabling IGMP Querier	262
Show IGMP Querier Status	264
CLI: Showing IGMP Querier Status	264
Web Interface: Showing IGMP Querier Status	265
Chapter 13 Security Management	266
Port Security	266
Set the Dynamic and Static Limit on the Port 1/0/1	267
CLI: Setting the Dynamic and Static Limit on the Port 1/0/1	267
Web Interface: Setting the Dynamic and Static Limit on the Port 1/0/1	267
Convert the Dynamic Address Learned from 1/0/1 to the Static Address	269
CLI: Converting the Dynamic Address Learned from 1/0/1 to the Static Address	269
Web Interface: Converting the Dynamic Address Learned from 1/0/1 to the Static Address	269
Create a Static Address	270
CLI: Creating a Static Address	270
Web Interface: Creating a Static Address	270
Protected Ports	271
CLI: Configuring a Protected Port to Isolate Ports on the Switch	271
Web Interface: Configuring a Protected Port to Isolate Ports on the Switch	273
802.1x Port Security	278
CLI: Authenticating dot1x Users by a RADIUS Server	279
Web Interface: Authenticating dot1x Users by a RADIUS Server	281
Create a Guest VLAN	286
CLI: Creating a Guest VLAN	287
VLAN Assignment via RADIUS	292
CLI: Configuration on the Switch	293
Dynamic ARP Inspection	299
CLI: Dynamic ARP Inspection	300
Configuring Static Mapping	307
CLI: Configuring Static Mapping	307
Web Interface: Configuring Static Mapping	307
DHCP Snooping	309
CLI: Configuring DHCP Snooping	310
Web Interface: Configuring DHCP Snooping	310
Enter Static Binding into the Binding Database	313
CLI: Entering Static Binding into the Binding Database	313
Web Interface: Entering Static Binding into the Binding Database	314
Configure the Maximum Rate of DHCP Messages	314
CLI: Configuring the Maximum Rate of DHCP Messages	314
Web Interface: Configuring the Maxiumum Rate of DHCP Messages	315
IP Source Guard	316
CLI: Configuring Dynamic ARP Inspection	317
Web Interface: Configuring Dynamic ARP Inspection	317
Chapter 14 Simple Network Time Protocol (SNTP)	322
Show SNTP (CLI Only)	322
show sntp	322
show sntp client	323
show sntp server	323
Configure SNTP	323
CLI: Configuring SNTP	324
Web Interface: Configuring SNTP	325
Set the Time Zone (CLI Only)	326
Set Named SNTP Server	326
CLI: Setting Named SNTP Server	326
Web Interface: Setting Named SNTP Server	327
Chapter 15 Tools	329
Traceroute	329
CLI:Traceroute	329
Web Interface: Traceroute	330
Configuration Scripting	331
script	332
script list and script delete	332
script apply running-config.scr	332
Create a Configuration Script	333
Upload a Configuration Script	333
Pre-Login Banner	333
Creating a Pre-Login Banner (CLI Only)	333
Port Mirroring	334
CLI: Specifying the Source (Mirrored) Ports and Destination (Probe)	335
Web Interface: Specifying the Source (Mirrored) Ports and Destination (Probe)	335
Dual Image	336
CLI: Downloading a Backup Image and Having It Active	336
Web Interface: Downloading a Backup Image and Having It Active	337
Outbound Telnet	339
CLI: show network	339
CLI: show telnet	340
CLI: transport output telnet	340
Web Interface: Configuring Telnet	340
CLI: session-limit and session-timeout	341
Web Interface: Configuring the Session Timeout	341
Chapter 16 Syslog	343
Show Logging	344
CLI: Show Logging	344
Web Interface: Show Logging	344
Show Logging Buffered	347
CLI: Showing Logging Buffered	347
Web Interface: Showing Logging Buffered	347
Show Logging Traplogs	348
CLI: Showing Logging Traplogs	348
Web Interface: Showing Logging Trap Logs	349
Show Logging Hosts	349
CLI: Showing Logging Hosts	349
Web Interface: Showing Logging Hosts	349
Log Port Configuration	350
CLI: Logging Port Configuration	350
Web Interface: Logging Port Configuration	351
Chapter 17 Managing Switch Stacks	352
Understanding Switch Stacks	353
Switch Stack Membership	353
Switch Stack Cabling (FSM73xxS)	354
Stack Master Election and Re-Election	355
Stack Member Numbers	356
Stack Member Priority Values	356
Switch Stack Offline Configuration	357
Effects of Replacing a Preconfigured Switch in a Switch Stack	357
Effects of Removing a Preconfigured Switch from a Switch Stack	358
Switch Stack Software Compatibility Recommendations	358
Incompatible Software and Stack Member Image Upgrades	358
Switch Stack Configuration Files	358
Switch Stack Management Connectivity	358
Switch Stack Configuration Scenarios	359
Stacking Recommendations	360
General Practices	360
Initial installation and Power-up of a Stack	360
Removing a Unit from the Stack	361
Adding a Unit to an Operating Stack	361
Replacing a Stack Member with a New Unit	362
Renumber Stack Members	362
CLI: Renumbering Stack Members	362
Web Interface: Renumbering Stack Members	363
Moving a Master to a Different Unit in the Stack	364
CLI: Moving a Master to a Different Unit in the Stack	364
Web Interface: Moving a Master to a Different Unit in the Stack	364
Removing a Master Unit from an Operating Stack	365
Merging Two Operational Stacks	365
Preconfiguration	365
Upgrading Firmware	366
Migration of Configuration With a Firmware Upgrade	366
Code Mismatch	366
Web Interface: Upgrading Firmware	367
Configure a Stacking Port as an Ethernet Port	367
CLI: On Switch A:	368
CLI On Switch B:	369
Web Interface on Switch A:	369
Web Interface On Switch B:	370
Stack the Switches using 10G fiber	371
CLI On Switch A	372
CLI On Switch B:	372
Web Interface on Switch A:	373
Web Interface on Switch B:	373
Chapter 18 SNMP	375
Add a New Community	375
CLI: Adding a New Community	375
Web Interface: Adding a New Community	375
Enable SNMP Trap	376
CLI: Enabling SNMP Trap	376
Web Interface: Enabling SNMP Trap	376
Configure SNMP V3	377
CLI: Configuring SNMP V3	377
Web Interface: Configuring SNMP V3	378
sFlow	379
CLI: Configuring Statistical Packet-Based Sampling of Packet Flows with sFlow	380
Web Interface: Configuring Statistical Packet-based Sampling with sFlow	381
Configure Time-Based Sampling of Counters with sFlow	383
CLI: Configuring Time-Based Sampling of Counters with sFlow	383
Chapter 19 DNS	385
Specify Two DNS Servers	385
CLI: Specifying Two DNS Servers	385
Web Interface: Specifying Two DNS Servers	385
Manually Add a Host Name and an IP Address	386
CLI Example: Manually Adding a Host Name and an IP Address	386
Web Interface: Manually Adding a Host Name and an IP Address	387
Chapter 20 DHCP Server	388
Configure a DHCP Server in Dynamic Mode	388
CLI: Configuring a DHCP Server in Dynamic Mode	389
Web Interface: Configuring a DHCP Server in Dynamic Mode	389
Configure a DHCP Reservation	392
CLI: Configuring a DHCP Reservation	393
Web Interface: Configuring a DHCP Reservation	393
Chapter 21 Double VLANs	395
Enable a Double VLAN	396
CLI: Enabling a Double VLAN on a VLAN	396
Web Interface: Enabling a Double VLAN on a VLAN	396
Chapter 22 Private VLAN Groups	401
Create a Private VLAN Group	401
CLI: Creating a Private VLAN Group	402
Web Interface: Creating a Private VLAN Group	403
Chapter 23 Spanning Tree Protocol	407
Configure Classic STP (802.1d)	407
CLI: Configuring Classic STP (802.1d)	407
Web Interface:Configuring Classic STP (802.1d)	407
Configure Rapid STP (802.1w)	409
CLI: Configuring Rapid STP (802.1w)	409
Web Interface: Configuring Rapid STP (802.1w)	409
Configure Multiple STP (802.1s)	410
CLI: Configuring Multiple STP (802.1s)	411
Web Interface: Configuring Multiple STP (802.1s)	411
Chapter 24 Tunnel	414
CLI: Creating a Tunnel	414
Web Interface: Creating a Tunnel	416
Chapter 25 IPv6 Interface Configuration	423
Creating an IPv6 Routing Interface	423
Web Interface: Creating an IPv6 Routing Interface	424
Create an IPv6 Network Interface	426
CLI: Configure the IPv6 Network Interface	426
Web Interface: Configuring the IPv6 Network Interface	426
Create an IPv6 Routing VLAN	428
CLI: Creating an IPv6 Routing VLAN	428
Web Interface: Creating an IPv6 VLAN Routing Interface	429
Chapter 26 PIM	433
PIM-DM Configuration	433
CLI: Configuring PIM-DM	435
Web Interface: Configuring PIM-DM	438
PIM-SM Configuration	459
CLI: Configuring PIM-SM	461
Web Interface: Configuring PIM-SM	464
Chapter 27 DHCP L2 Relay	491
Enable DHCP L2 Relay	492
CLI: DHCP L2 Relay	492
Web Interface: DHCP L2 Relay	493
Chapter 28 DHCP L3 Relay	497
Configure a DHCP Server	498
CLI: Configuring a DHCP Server	498
Web Interface: Configuring a DHCP Server	498
Configure a DHCP L3 Relay	502
CLI: Configuring a DHCP L3 Relay	502
Web Interface: Configuring a DHCP L3 Relay	502
Chapter 29 MLD	507
Configure MLD	507
CLI: Configuring MLD	508
Web Interface: Configuring MLD	510
MLD Snooping	525
CLI: MLD Snooping	526
Web Interface: MLD Snooping	526
Chapter 30 DVMRP	530
Configure DVMRP on a NETGEAR Switch	530
CLI: Configuring DVMRP	531
Web Interface: Configuring DVMRP	536
Chapter 31 Captive Portal	550
Captive Portal Configuration	551
Enable Captive Portal	551
CLI: Enabling Captive Portal	551
Web Interface: Enabling Captive Portal	552
Client Access, Authentication, and Control	554
Block a Captive Portal Instance	554
CLI: Blocking a Captive Portal Instance	554
Web Interface: Blocking a Captive Portal Instance	554
Local Authorization User/Group Configuration	555
CLI: Creating Users and Groups	555
Web Interface: Creating Users and Groups	555
Remote Authorization (RADIUS) User Configuration	557
CLI: Configuring RADIUS as the Verification Mode	558
Web Interface: Configuring RADIUS as the Verification Mode	558
SSL Certificates	559

Match case Limit results 1 per page

ProSafe 7000 Managed Switch Software Administration Manual, Release 8.0.3

22-1

Private VLAN Groups

v1.0, June 2010

Chapter

Private VLAN Groups

The private VLAN Group allows network administrator to create groups of users within a VLAN that cannot

communicate with members in different groups but only within the same group. There are two modes for the

private group. The mode can be either “isolated” or “community.” When in “isolated” mode, the member

port in the group cannot forward its egress traffic to any other members in the same group. By default, the

mode is “community” mode that each member port can forward traffic to other members in the same group,

but not to members in other groups. The following examples shows how to create a private group.

Create a Private VLAN Group

The following example creates two groups. the group1 is in “community” mode and the group2 is in

“isolated” mode.

Internet

Port 1/0/13

Layer 2 Switch

Port 1/0/17

Port 1/0/6

Group 1

Group 2

Port 1/0/7

Port 1/0/16

Figure

22-1