Home » Netgear Manuals » Hubs & Switches » Netgear M5300-52G3 » Manual Viewer

Netgear M5300-52G3 Command Line Interface (CLI) User Manual - Page 87

switchport private-vlan, communicate with the endpoints within a community and with any con d

Add to My Manuals
Save this manual to your list of manuals

Page 87 highlights

ProSafe Managed Switch primary VLAN can be configured per private VLAN. All ports within a private VLAN share the same primary VLAN. • Isolated VLAN-A secondary VLAN that carries traffic from isolated ports to promiscuous ports. Only one isolated VLAN can be configured per private VLAN. • Community VLAN-A secondary VLAN that forwards traffic between ports that belong to the same community and the promiscuous ports. There can be multiple community VLANs per private VLAN. Three types of port designations exist within a private VLAN: • Promiscuous Ports-An endpoint connected to a promiscuous port is allowed to communicate with any endpoint within the private VLAN. Multiple promiscuous ports can be defined for a single private VLAN domain. • Isolated Ports-An endpoint connected to an isolated port is allowed to communicate with endpoints connected to promiscuous ports only. Endpoints connected to adjacent isolated ports cannot communicate with each other. • Community Ports-An endpoint connected to a community port is allowed to communicate with the endpoints within a community and with any configured promiscuous port. The endpoints that belong to one community cannot communicate with endpoints that belong to a different community or with endpoints connected to isolated ports. The Private VLANs can be extended across multiple switches through inter-switch/stack links that transport primary, community and isolated VLANs between devices. switchport private-vlan This command is used to define a private-VLAN association for an isolated or community port or a mapping for a promiscuous port. Format Mode switchport private-vlan {host-association | mapping {add | remove} } Interface Config Term host-association mapping primary-vlan-id secondary-vlan-id add remove secondary-vlan-list Definition Defines VLAN association for community or host ports. Defines the private VLAN mapping for promiscuous ports. Primary VLAN ID of a private VLAN. Secondary (isolated or community) VLAN ID of a private VLAN. Associates the secondary VLAN with the primary one. Deletes the secondary VLANs from the primary VLAN association. A list of secondary VLANs to be mapped to a primary VLAN. Switching Commands 87

Section	Page
ProSafe Managed Switch	1
Contents	3
1. Using the Command-Line Interface	8
Licensing and Command Support	8
Command Syntax	10
Command Conventions	11
Common Parameter Values	11
Unit/Slot/Port Naming Convention	12
Using a Command’s “No” Form	13
Managed Switch Modules	13
Command Modes	14
Command Completion and Abbreviation	17
CLI Error Messages	18
CLI Line-Editing Conventions	18
Using CLI Help	19
Accessing the CLI	20
2. Stacking Commands	21
Dedicated Port Stacking	21
Stacking Commands	29
Non-Stop Forwarding Commands	31
Stack Firmware Synchronization Commands	35
3. Switching Commands	38
Port Configuration Commands	39
Loopback Interface Commands	45
Spanning Tree Protocol (STP) Commands	47
VLAN Commands	64
Double VLAN Commands	77
Voice VLAN Commands	80
Provisioning (IEEE 802.1p) Commands	82
Protected Ports Commands	82
Private Group Commands	85
Private VLAN	86
GARP Commands	90
GVRP Commands	92
GMRP Commands	94
Port-Based Network Access Control Commands	96
802.1X Supplicant Commands	109
Storm-Control Commands	112
Flow Control Commands	122
Port-Channel/LAG (802.3ad) Commands	123
Port Mirroring	139
Static MAC Filtering	141
DHCP L2 Relay Agent Commands	145
DHCP Client Commands	149
DHCP Snooping Configuration Commands	150
Dynamic ARP Inspection Commands	159
IGMP Snooping Configuration Commands	166
IGMP Snooping Querier Commands	177
MLD Snooping Commands	180
MLD Snooping Querier Commands	187
set mld querier	187
set mld querier query_interval	188
set mld querier timer expiry	188
set mld querier election participate	189
show mldsnooping querier	189
Port Security Commands	190
LLDP (802.1AB) Commands	194
LLDP-MED Commands	203
Denial of Service Commands	212
MAC Database Commands	222
ISDP Commands	224
Priority-Based Flow Control Commands	229
4. Multicast VLAN Registration (MVR)	232
About MVR	232
MVR Commands	232
5. Routing Commands	240
Address Resolution Protocol (ARP) Commands	240
IP Routing Commands	246
Router Discovery Protocol Commands	263
Virtual LAN Routing Commands	266
Virtual Router Redundancy Protocol Commands	267
DHCP and BOOTP Relay Commands	276
IP Helper Commands	278
Open Shortest Path First (OSPF) Commands	282
OSPF Graceful Restart Commands	322
nsf	323
nsf restart-interval	323
nsf helper	324
nsf helper disable	325
nsf [ietf] helper strict-lsa-checking	325
OSPF Interface Flap Dampening Commands	327
Routing Information Protocol (RIP) Commands	329
ICMP Throttling Commands	336
6. IP Multicast Commands	339
Multicast Commands	339
DVMRP Commands	344
PIM Commands	349
Internet Group Message Protocol (IGMP) Commands	360
IGMP Proxy Commands	367
7. IPv6 Commands	373
Tunnel Interface Commands	373
IPv6 Routing Commands	375
OSPFv3 Commands	398
OSPFv3 Graceful Restart Commands	429
DHCPv6 Commands	431
8. IPv6 Multicast Commands	439
IPv6 Multicast Forwarder Commands	439
IPv6 PIM Commands	442
IPv6 MLD Commands	449
IPv6 MLD-Proxy Commands	455
9. Quality of Service (QoS) Commands	461
Class of Service (CoS) Commands	461
Differentiated Services (DiffServ) Commands	469
DiffServ Class Commands	470
DiffServ Policy Commands	479
DiffServ Service Commands	484
DiffServ Show Commands	485
MAC Access Control List (ACL) Commands	491
IP Access Control List (ACL) Commands	495
IPv6 Access Control List (ACL) Commands	502
Time Range Commands for Time-Based ACLs	506
AutoVOIP	508
iSCSI Commands	512
10. Power over Ethernet (PoE) Commands	518
About PoE	518
PoE Commands	519
11. Utility Commands	529
Auto Install Commands	530
Dual Image Commands	532
System Information and Statistics Commands	534
Logging Commands	550
Email Alerting and Mail Server Commands	556
System Utility and Clear Commands	562
Simple Network Time Protocol (SNTP) Commands	572
DHCP Server Commands	579
DNS Client Commands	591
Packet Capture Commands	595
Serviceability Packet Tracing Commands	598
Cable Test Command	617
sFlow Commands	617
Software License Commands	622
IP Address Conflict Commands	623
Link Local Protocol Filtering Commands	624
RMON Stats and History Commands	625
UDLD Commands	631
12. Management Commands	635
Configuring the Switch Management CPU	636
Network Interface Commands	638
Console Port Access Commands	641
Telnet Commands	643
Secure Shell (SSH) Commands	648
Management Security Commands	651
Hypertext Transfer Protocol (HTTP) Commands	652
Access Commands	659
User Account Commands	659
SNMP Commands	683
RADIUS Commands	694
TACACS+ Commands	706
Configuration Scripting Commands	711
Pre-Login Banner and System Prompt Commands	713
Switch Database Management (SDM) Templates	714
IPv6 Management Commands	716
13. Log Messages	721
Core	722
Utilities	724
Management	726
Switching	730
QoS	736
Routing/IPv6 Routing	737
Multicast	740
Stacking	742
Technologies	743
O/S Support	745
14. Captive Portal Commands	747
Captive Portal Global Commands	747
Captive Portal Configuration Commands	751
Captive Portal Status Commands	757
Captive Portal Client Connection Commands	761
Captive Portal Interface Commands	765
Captive Portal Local User Commands	766
Captive Portal User Group Commands	772

Match case Limit results 1 per page

Switching Commands

ProSafe Managed Switch

primary VLAN can be configured per private VLAN. All ports within a private VLAN share

the same primary VLAN.

•

Isolated VLAN—A secondary VLAN that carries traffic from isolated ports to promiscuous

ports. Only one isolated VLAN can be configured per private VLAN.

•

Community VLAN—A secondary VLAN that forwards traffic between ports that belong to

the same community and the promiscuous ports. There can be multiple community

VLANs per private VLAN.

Three types of port designations exist within a private VLAN:

•

Promiscuous Ports—An endpoint connected to a promiscuous port is allowed to

communicate with any endpoint within the private VLAN. Multiple promiscuous ports can

be defined for a single private VLAN domain.

•

Isolated Ports—An endpoint connected to an isolated port is allowed to communicate with

endpoints connected to promiscuous ports only. Endpoints connected to adjacent

isolated ports cannot communicate with each other.

•

Community Ports—An endpoint connected to a community port is allowed to

communicate with the endpoints within a community and with any configured

promiscuous port. The endpoints that belong to one community cannot communicate with

endpoints that belong to a different community or with endpoints connected to isolated

ports.

The Private VLANs can be extended across multiple switches through inter-switch/stack links

that transport primary, community and isolated VLANs between devices.

switchport private-vlan

This command is used to define a private-VLAN association for an isolated or community

port or a mapping for a promiscuous port.

Format

switchport private-vlan {host-association <primary-vlan-id>

<secondary-vlan-id> | mapping <primary-vlan-id> {add | remove}

<secondary-vlan-list>}

Mode

host-association

mapping

primary-vlan-id

secondary-vlan-id

add

remove

secondary-vlan-list

Interface Config

Term

Definition

Defines VLAN association for community or host ports.

Defines the private VLAN mapping for promiscuous ports.

Primary VLAN ID of a private VLAN.

Secondary (isolated or community) VLAN ID of a private VLAN.

Associates the secondary VLAN with the primary one.

Deletes the secondary VLANs from the primary VLAN association.

A list of secondary VLANs to be mapped to a primary VLAN.