HP MSM317 Installation And Configuration Manual page 29

if two ports are set to Uplink tagging with different Primary VLAN IDs, then traffic cannot be
exchanged between the two ports.
For example, if the ports are configured as follows:
Port Configuration
1 Primary VLAN=Uplink
tagging Primary VLAN
ID=10
2 Primary VLAN=Uplink
tagging
Primary VLAN ID=20
3 Primary VLAN=Uplink
tagging
Primary VLAN ID=30
4 Primary VLAN=Uplink
tagging
Primary VLAN ID=30
It means that:
Although Ports 1 and 2 both only accept untagged traffic, they cannot exchange traffic
because internally their traffic is tagged on different VLANs.
Ports 3 and 4 can exchange traffic because internally their traffic is tagged on the same
VLAN. The VLAN tag is stripped when the traffic is sent out on the ports.
Primary VLAN ID
Not available when Send Network Policy TLV is enabled)
VLAN ID to assign to the primary VLAN.
Secondary VLAN
Not available when Send Network Policy TLV is enabled.
When this option is enabled, the port will support a second VLAN with the specified value.
The secondary VLAN is always tagged on both the switch port and the Uplink port.
Quarantine VLAN
When this option is enabled, users that fail to be authenticated still gain access to the port.
However, all user traffic is forced onto the specified quarantine VLAN.
Allow dynamic VLAN assignment
When this option is enabled:
VLAN behavior on the port changes once the user is authenticated and the dynamic VLAN
is assigned. See the Port configuration summary later in this section for details.
The port can only be bound to a non-access-controlled VSC or not bound to any VSC.
Incoming traffic Outgoing traffic
Only untagged traffic is Untagged.
accepted.
Only untagged traffic is Untagged.
accepted.
Only untagged traffic is Untagged.
accepted.
Only untagged traffic is Untagged.
accepted.
Uplink port
Tagged with VLAN 10.
Tagged with VLAN 20.
Tagged with VLAN 30.
Tagged with VLAN 30.
Configuring the switch ports 29