UTStarcom iSpirit 3026 Manual page 61

Port overlapping is not allowed in a VLAN group, i.e., a port can either be separated, or shared,
or promiscuous, but can't be both of them or all of them; Furthermore, a shared port is unique in
a shared group and among shared port groups, i.e., it can't be the same as any other port in the
same group or any other group. Port overlapping is not allowed among VLAN groups either, i.e.,
one port can only belongs to one VLAN group.
As shown in Figure4-1, ports 1-6 and 7-9 belong to a private VLAN group, with port 1 and port 2
as separated; port 3-6 as shared, with port 3 and port 4 in a shared port group, port 5 and port 6
in a group; port 7-9 as promiscuous. According to functionality for different types of ports, here is
the communication style for this VLAN group:
(Separated ports) user 1 and user 2 can only access server 1, server 2 and INTERNET,
neither communication is allowed between them, nor between them and user 3-6;
(Shared ports) user 3 and user 4 can access server 1, server 2 and INTERNET, and
they can also communicate with each other, but not allowed with user 1-2 and user 5-6; and so
are user 5 and user 6: user 5 and user 6 can access server 1, server 2 and INTERNET, and they
can also communicate with each other, but not allowed with user 1-4;
(Promiscuous ports) server 1 and server 2 can communicate with user 1-6, can access
INTERNET, and they can communicate with each other.
Figure4-1.example for private VLAN.