Chapter 33 Private VLAN
GS3700/XGS3700 Series User’s Guide
337
Tagged Private VLANs can span switches but trunking ports must be VLAN-trunking ports - see
Advanced > VLAN > VLAN Port Setting.
This is the communication process if primary VLAN P-VLAN 100 is associated with community
VLAN C-VLAN 101 and isolated VLAN I -VLAN 102 .
• Promiscuous ports in P-VLAN 100 can communicate with all ports in P-VLAN 1 00 including
community ports in C-VLAN 10 1 and isolated ports in I -VLAN 10 2.
• Community ports in C-VLAN 101 can communicate with promiscuous ports in P-VLAN 1 00 and
other community ports in C-VLAN 1 01 . They cannot communicate with isolated ports in I -VLAN
10 2.
• Isolated ports can communicate with promiscuous ports in P-VLAN 1 00. They cannot
communicate with other isolated ports in I -VLAN 10 2 nor community ports in C-VLAN 10 1.
Note: I solation in VLAN > VLAN Port Setting (see
Section 7.7.2 on page 109) has a
higher priority than private VLAN settings, so promiscuous ports with I solation in
VLAN > VLAN Port Setting enabled will not be able to communicate with each
other.
33.1.1 Configuration
You must go to the Static VLAN screen first (see
Section 7.7 on page 106) to create VLAN IDs for
Primary, I solated or Community VLANs.
Table 164 Spanning PVLAN Graphic Key
LABEL DESCRIPTION
UP Uplink promiscuous port
TP VLAN-trunking ports
S1, S2 Switch 1, Switch 2
P-VLAN 100 Primary private VLAN with VLAN ID tag of 100
C-VLAN 101 Community private VLAN with VLAN ID tag of 101
I-VLAN 102 Isolated private VLAN with VLAN ID tag of 102
To Next Page
Loading...
