Private vlans for trunked ports – Allied Telesis AlliedWare Plus Operating System Version 5.4.4C (x310-26FT,x310-26FP,x310-50FT,x310-50FP) User Manual

Page 423

VLAN Introduction

Software Reference for x310 Series Switches

C613-50046-01 REV A

AlliedWare Plus

Operating System - Version 5.4.4C

16.11

Private VLANs for trunked ports

Private VLAN trunk ports allow you to combine traffic for private isolated VLANs over a
trunk. A port in trunk mode enabled as a promiscuous port with the

switchport mode

private-vlan trunk promiscuous

command can carry both multiple isolated private

VLANs and non-private VLANs. A promiscuous port in trunk mode allows you to combine
multiple isolated VLANs on a single trunk port. A port in trunk mode enabled as a
secondary port with the

switchport mode private-vlan trunk secondary

command can

combine traffic for multiple isolated VLANs over a trunk.

A private VLAN group for trunked ports comprises the following components:

■

a single promiscuous port

■

one or more isolated secondary ports
These can only communicate with the associated promiscuous port.

■

isolated VLANs
In this VLAN type, communication can only take place between each secondary port
and its associated promiscuous port. Membership rules for private VLANs for trunked
ports

The following membership rules apply when creating and operating private VLANs for
trunked ports.

A promiscuous trunk port:

■

must be in trunk mode

■

can be a member of both isolated VLANs and non-isolated VLANs

■

has a group ID that is solely used to associate the promiscuous port with secondary
ports

A secondary trunk port:

■

must be in trunk mode

■

can only be a member of isolated VLANs

■

cannot be a promiscuous port in another VLAN

■

has a group ID that is solely used to associate the secondary port with its promiscuous
port

Unlike private VLANs for ports in access mode, private VLANs for trunked ports have no
secondary to primary VLAN mappings.

Note

Private VLAN trunk ports are not supported by the current AlliedWare Plus GVRP
implementation. Private VLAN trunk ports and GVRP are mutually exclusive.