Private Vlans - ZyXEL Communications MGS3600-24F User Manual

F M
RONT ATTER

7.11.5 Private VLANs

Use the Private VLANs sub-menu to configure a group of ports to communicate only with an uplink port and not among themselves.
Private VLANs are based on source port masks, not the frame contents so they're not connected to IEEE 802.1Q VLANs. This means that VLAN
IDs and Private VLAN IDs can be the same. A port must be a member of both a VLAN and a Private VLAN to be able to forward packets. By
default, all ports are VLAN unaware and members of VLAN 1 and Private VLAN 1. A VLAN unaware port can only be a member of one VLAN, but
it can be a member of multiple Private VLANs.
Private VLANs Membership
Use the Private VLAN Membership
To configure Private membership:
1. Click Configuration >
2. Click Add New Private
3. Configure the parameters.
4. Click Save.
Parameter description
PVLAN ID:

Use this field to configure the identity of this private VLAN.
Port Members:

Use these check boxes to configure membership for each VLAN ID. No ports are members by default.
Port Isolation
Use the Port Isolation sub-menu to configure ports so they can only communicate with the uplink ports.
To configure Port Isolation:
MGS3600-24F/XGS3600-26F/XGS3600-28F
sub-menu to configure which ports are part of a private VLAN.
VLAN > Private VLAN Membership.
VLAN.
7-84 U ' G
SER S UIDE