
454545
© 2002, Cisco Systems, Inc. All rights reserved.
l2-security-bh.ppt
Promiscuous
Port
Promiscuous
Port
Community
ÔAÕ
Community
ÔBÕ
Isolated
Ports
Primary VLAN
Community VLAN
Community VLAN
Isolated VLAN
Only One Subnet!
x
x
x
x
x
x
x
x
ARP Spoof Mitigation: Private VLANs
¥ PVLANs isolate traffic in
specific communities to
create distinct ÒnetworksÓ
within a normal VLAN
¥ Note: Most inter-host
communication is disabled
with PVLANs turned on
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/sw_7_1/conf_gd/vlans.htm#xtocid854519
Komentarze do niniejszej Instrukcji