KBC Networks ESML6-P3 - Manual (Page 18)

Ethernet Switch User Manual
Manual_web_mgt_sw-ESML6-P3-Rev 1107
Copyright © KBC Networks Ltd. 2011 Page 17 of 51 www.kbcnetworks.com
PVLAN
A private VLAN (PVLAN) contains switch ports that cannot communicate with each other
on a switch but can access a shared domain. These ports are called private ports. Each
private VLAN contains one or more private ports, and a single uplink port or uplink
aggregation group.
The PVLAN function should be configured as follows:
• In the shared domain VLAN, add the ports so that the private ports are set as
tagged and the ports within the shared domain are set as untagged.
• In the isolated domain VLANs, group the private ports as untagged members with
only the shared ports tagged, (do not include the ports from the other private
VLAN).
• Add all the VLANs to the PVLAN.
Example:
Fig 3-21 PVLAN
In the example in Fig 3-21 ports 3, 4, 5 & 6 are private ports grouped as VLAN2 and
VLAN3 and VLAN1 is the shared domain. VLAN1 must to be able to communicate with
VLAN2 and VLAN3 however; VLAN 2 & VLAN 3 must not be able to communicate with
each other.
VLAN1 port 1 = untagged port 3 = tagged
port 2 = untagged port 4 = tagged
port 5 = tagged
port 6 = tagged
VLAN2
port 3 = untagged port 1 = tagged
port 4 = untagged port 2 = tagged
VLAN3
port 5 = untagged port 1 = tagged
Port 6 = untagged port 2 = tagged
The VLANs must then be added to the PVLAN.