Tripp Lite NGI-S04C2 Owner's Manual page 101

A broadcast frame (or a multicast frame for a multicast group that is known by the system)
is duplicated only on ports that are members of the VID (except the ingress port itself),
thus confining the broadcast to a specific domain.
802.1QPort Base VLAN

With port-based VLAN membership, the port is assigned to a specific VLAN
independent of the user or system attached to the port. This means all users attached to
the port should be members of the same VLAN. The network administrator typically
performs the VLAN assignment. The port configuration is static and cannot be
automatically changed to another VLAN without manual reconfiguration.
As with other VLAN approaches, the packets forwarded using this method do not leak
into other VLAN domains on the network. After a port has been assigned to a VLAN, the
port cannot send to or receive from devices in another VLAN without the intervention of
a Layer 3 device.
The device that is attached to the port likely has no understanding that a VLAN exists.
The device simply knows that it is a member of a subnet and that the device should be
able to talk to all other members of the subnet by simply sending information to the cable
segment. The switch is responsible for identifying that the information came from a
specific VLAN and for ensuring that the information gets to all other members of the
VLAN. The switch is further responsible for ensuring that ports in a different VLAN do
not receive the information.
This approach is quite simple, fast, and easy to manage in that there are no complex
lookup tables required for VLAN segmentation. If port-to-VLAN association is done
with an application-specific integrated circuit (ASIC), the performance is very good. An
ASIC allows the port-to-VLAN mapping to be done at the hardware level.
The port isolation is a port-based virtual LAN feature. It partitions the switching ports
into virtual private domains designated on a per port basis. Data switching outside of the
port's private domain is not allowed. It will ignore the packets' tag VLAN information.
This feature is a per port setting to configure the egress port(s) for the specific port to
forward its received packets. If the CPU port (port 0) is not an egress port for a specific
port, the host connected to the specific port cannot manage the Switch.
If you wish to allow two subscriber ports to talk to each other, you must define the egress
port for both ports. CPU refers to the Switch management port. By default it forms a
VLAN with all Ethernet ports. If it does not form a VLAN with a particular port then the
Switch cannot be managed from that port.
Notice:
Maximum allowable VLAN's to configure on the device are 5.
Access port:
Allows one VLAN only which is untagged port and PVID (particular VLAN id) should
be configured on interface by default VLAN 1 is PVID for all the interfaces. The port
should be connected to PC device.
101