Brocade FastIron Ethernet Switch Platform and Layer 2 Switching Configuration Guide - Manual (Page 411)

FIGURE 91 PVLAN used to secure communication between a workstation and servers
This example uses a PVLAN to secure traffic between hosts and the rest of the network through a
firewall. Five ports in this example are members of a PVLAN. The first port (port 3/2) is attached to a
firewall. The next four ports (ports 3/5, 3/6, 3/9, and 3/10) are attached to hosts that rely on the firewall
to secure traffic between the hosts and the rest of the network. In this example, two of the hosts (on
ports 3/5 and 3/6) are in a community PVLAN, and thus can communicate with one another as well as
through the firewall. The other two hosts (on ports 3/9 and 3/10), are in an isolated VLAN and thus can
communicate only through the firewall. The two hosts are secured from communicating with one
another even though they are in the same VLAN.
By default, unknown-unicast, unregistered multicast, and broadcast are flooded in PVLAN.
By default, on all the FastIron platforms, the device will forward broadcast, unregistered multicast, and
unknown unicast packets from outside sources into the PVLAN.
By default, in FastIron FSX platforms , the device will not forward broadcast, unregistered multicast, and
unknown unicast packets from outside sources into the PVLAN. If needed, you can override this
behavior for broadcast packets, unknown-unicast packets, or both.
You can configure a combination of the following types of PVLANs:
VLANs
FastIron Ethernet Switch Platform and Layer 2 Switching Configuration Guide 411
53-1003086-04