Dell PowerConnect B-FCXs Configuration Manual page 532

13
Configuring private VLANs
•
Each PVLAN must have a primary VLAN. The primary VLAN is the interface between the secured
ports and the rest of the network. The PVLAN can have any combination of community and isolated
VLANs.
As with regular VLANs, PVLANs can span multiple switches. The PVLAN is treated like any other
VLAN by the PVLAN-trunk ports. The PVLAN-trunk port is added to both the primary and the
secondary VLANs as a tagged member through the pvlan-trunk command.
example of a PVLAN network across switches:
•
•
•
FIGURE 106
VLAN 100
Primary VLAN
1/11
1/1
VLAN 10
Isolated VLAN
Figure 107
490
Community – Broadcasts and unknown unicasts received on community ports are sent to the
primary port and also are flooded to the other ports in the community VLAN.
Broadcast, unknown unicast or unregistered multicast traffic from the primary VLAN port is
forwarded to all ports in isolated and community VLANs in both the switches.
Broadcast, unknown unicast or unregistered multicast traffic from an isolated port in switch A
is not forwarded to an isolated port in switch A. It will not be forwarded to an isolated port in
switch B across the PVLAN-trunk port.
Broadcast, unknown unicast or unregistered multicast traffic from a community port in switch
A will be forwarded to a community port in switch B through the PVLAN-trunk port. It is
forwarded to the promiscuous ports and switch – switch ports of the primary VLAN.
PVLAN across switches
Firewall
Switch A
1/5
1/2 1/3
VLAN 20
Community VLAN
PVLAN-Trunk Port - carries traffic
shows an example PVLAN network with tagged switch-switch link ports.
PVLAN-Trunk Ports
1/10
for VLAN 10, 20 and 100
PowerConnect B-Series FCX Configuration Guide
Figure 106
Routers
Switch B
1/20
1/11 1/12
VLAN 10 VLAN 20
Isolated VLAN Community VLAN
shows an
1/15 1/16
1/13
53-1002266-01