【正文】 {type slot/port} | {portchannel channel_id}} ? Configures the action clause in a VLAN access map sequence Switch(config)vlan filter map_name vlan_list list ? Applies the VLAN access map to the specified VLANs 169。 2022, Cisco Systems, Inc. All rights reserved. BCMSN — 931 Customer VLAN Requirements ? ISP customers require Inter access for multiple servers – Isolation from other customers – Communication between servers ? Traditional solution: one VLAN and IP sub per customer – High resource requirements – Limited scalability – High management plexity 169。 2022, Cisco Systems, Inc. All rights reserved. BCMSN — 932 Private VLANs 169。 2022, Cisco Systems, Inc. All rights reserved. BCMSN — 933 PVLAN Ports and Types Private VLAN ports: ? Promiscuous: Can municate with all other ports ? Isolated: Can only municate with promiscuous ports ? Community: Can municate with other members of munity and all promiscuous ports Private VLAN types: ? Primary: Used by promiscuous ports to municate with all other ports in the private VLAN ? Isolated: Used by isolated ports to municate with promiscuous ports ? Community: Used by munity ports to municate with each other and promiscuous ports 169。 2022, Cisco Systems, Inc. All rights reserved. BCMSN — 934 Configuring Private VLANs Switch(configvlan)privatevlan [primary | isolated | munity] ? Configures a VLAN as a private VLAN Switch(configvlan)privatevlan association {secondary_vlan_list | add svl | remove svl} ? Associates secondary VLANs with the primary VLAN Switchshow vlan privatevlan type ? Verifies private VLAN configuration 169。 2022, Cisco Systems, Inc. All rights reserved. BCMSN — 935 Configuring Private VLAN Ports Switch(configif)switchport mode privatevlan {host | promiscuous} ? Configures an interface as a private VLAN port Switch(configif)switchport privatevlan hostassociation primary_vlan_ID secondary_vlan_ID ? Associates an isolated or munity port with a private VLAN Switch(configif)privatevlan mapping primary_vlan_ID {secondary_vlan_list | add svl | remove svl} ? Maps a promiscuous PVLAN port to a private VLAN Switchshow interfaces privatevlan mapping ? Verifies private VLAN port configuration 169。 2022, Cisco Systems, Inc. All rights reserved. BCMSN — 936 Summary ? Cisco remends tasks you should plete to secure your switched work from attack. ? AAA work security services provide the primary framework through which you set up access control on a switch. ? Network access security is provided by port security and portbased authentication (). ? Use show mands to verify the configuration of port security. ? ACLs are useful for controlling access in a multilayer switched work. ? Private VLANs provide Layer 2 isolation between ports within the same private VLAN.