Protected Ports - Planet IXT-900 Series User Manual

4.3.1.5 Protected Ports

Overview
When a port is configured to be a member of protected group (also called Private VLAN), communication between protected
ports within that group can be prevented. Two application examples are provided in this section:
 Customers connected to an ISP can be members of the protected group, but they are not allowed to
communicate with each other within that VLAN.
 Servers in a farm of web servers in a Demilitarized Zone (DMZ) are allowed to communicate with the outside
world and with database servers on the inside segment, but are not allowed to communicate with each other
For protected port group to be applied, the Managed Media Converter must first be configured for standard VLAN operation.
Ports in a protected port group fall into one of these two groups:

Promiscuous (Unprotected) ports
— Ports from which traffic can be forwarded to all ports in the private VLAN
— Ports which can receive traffic from all ports in the private VLAN

Isolated (Protected) ports
— Ports from which traffic can only be forwarded to promiscuous ports in the private VLAN
— Ports which can receive traffic from only promiscuous ports in the private VLAN
User's Manual of IXT-900 Series
98