Table of Contents
Advertisement
TRENDnet User's Guide
Create a private VLAN
Bridge > VLAN > Private VLAN
The private VLAN feature allows you to create a more secure VLAN that is
completely isolated to its members and cannot communicate with other
VLANs. A private VLAN partitions the Layer 2 broadcast domain of a VLAN
into subdomains, allowing you to isolate the ports on the switch from each
other. A subdomain consists of a primary VLAN and one or more
secondary VLANs. All VLANs in a private VLAN domain share the same
primary VLAN. The secondary VLAN ID differentiates one subdomain
from another. The secondary VLANs may either be isolated VLANs or
community VLANs. A host on an isolated VLAN can only communicate
with the associated promiscuous port in its primary VLAN. Hosts on
community VLANs can communicate among themselves and with their
associated promiscuous port but not with ports in other community
VLANs.
The following guidelines apply when configuring private VLANs: The
default VLAN 1 cannot be a private VLAN. The management VLAN 4095
cannot be a private VLAN. The management port cannot be a member of
a private VLAN.IGMP Snooping must be disabled on isolated VLANs. Each
secondary port's (isolated port and community ports) PVID must match
its corresponding secondary VLAN ID. Ports within a secondary VLAN
cannot be members of other VLANs. All VLANs that make up the private
VLAN must belong to the same Spanning Tree Group.
© Copyright 2015 TRENDnet. All Rights Reserved.
To configure Private VLAN Settings, perform the following procedure:
Change the Private VLAN Settings by clicking the State radio
button choices that you want to change.
o Enable: Enable Private VLAN settings.
o Disable: Disable Private VLAN settings.
Press Apply to make the changes to take effect.
Set the Source Port to on port 1 – 8.
Click on the Forwarding Ports ratio button that applies to your
configuration.
Click Apply.
TPE-4840WS
52
Advertisement
Table of Contents
