Private Vlans (Pvlans) - FibroLAN Falcon Gen-3 M-Class User Manual

Falcon M-Class | User Guide
4.7.5

Private VLANs (PVLANs)

A traditional VLAN enables communication to/from all its member ports. A private VLAN is a special
VLAN which limits the connectivity between its port members. Each private VLAN contains one or
more private ports, and a single uplink port.
A typical Private VLAN consists of one "server" port and many "client" ports. A "server" port can
talk to all other ports in the VLAN. A "client" port can talk only to the "server" ports and not to
other "client" ports. A "client" port in µFalcon is defined as "Isolated" port. A port defined as
"Isolated" will behave as such for all private VLANs in which it is a member. A non-isolated port
page 4-will serve as "server" port in all private VLANs in which it is a member.
In terms of the switch VLAN table, a Private-VLAN uses a standard VLAN and adds the 'private'
attribute to it, which instructs the switch to filter the destination ports when forwarding a frame in
accordance with the "isolated" ports mask.
4.7.5.1 Private VLAN Membership Configuration
The Private VLAN membership configurations for the switch can be monitored and modified here.
Private VLANs can be added or deleted. Port members of each Private VLAN can be added or
removed.
Private VLANs are based on the source port mask, and there are no connections to VLANs. This
means that VLAN IDs and Private VLAN IDs can be identical.
A port must be a member of both a VLAN and a Private VLAN to be able to forward packets. By
default, all ports are VLAN unaware and members of VLAN 1 and Private VLAN 1. A VLAN unaware
port can only be a member of one VLAN, but it can be a member of multiple Private VLANs.
Figure 4-32: Private VLAN Membership Configuration display
73