Pvlan; Introduction; Preparing For Configuration; Default Configurations Of Pvlan - Raisecom ISCOM2600G-HI (A) Series Configuration Manual

Raisecom
ISCOM2600G-HI (A) Series Configuration Guide

2.3 PVLAN

2.3.1 Introduction

Private VLAN (PVLAN) provides Layer 2 isolation between interfaces in a VLAN, and it is
effective to distribute VLAN resources.
PVLAN type
VLANs are divided into two types: primary VLAN and secondary VLAN. The primary
VLAN and secondary VLAN form a PVLAN domain. The primary VLAN can communicate
both in and out of PVLANs, but the secondary VLAN can communicate in the PVLAN only.


Interface modes of PVLAN
The interface to be able to communicate with the external network is called the Promiscuous
interface. The interface in the secondary VLAN is the Host interface.




2.3.2 Preparing for configuration

Scenario
PVLAN, used on an enterprise Intranet, allows devices inside the VPLAN to communicate
with the default gateway only rather than the Intranet.
Prerequisite
Create a static VLAN and activate it.

2.3.3 Default configurations of PVLAN

Default configurations of PVLAN are as below.
Primary VLAN: each PVLAN can be configured with only one primary VLAN.
Interface of all types in PVLAN are members of primary VLAN.
Secondary VLAN: it can be divided into isolated VLAN and community VLAN
according to the different forwarding and isolation rules.
− Isolated VLAN: each PVLAN can be configured with only one isolated VLAN.
− Community VLAN: each PVLAN can be configured with multiple community
VLANs.
Promiscuous interface: it belongs to all PVLANs in the PVLAN domain. It can
communicate with all interfaces.
Isolated interface: isolated interfaces cannot communicate with each other, but they can
communicate with the Promiscuous interface and Trunk interface.
Community interface: community interfaces in a community can communicate with each
other, but community interfaces in different communities cannot communicate with each
other. All community interfaces can communicate with the Promiscuous interface and
Trunk interface.
Raisecom Proprietary and Confidential
Copyright © Raisecom Technology Co., Ltd.
2 Ethernet
68