D-Link UNIFIED WIRED & WIRELESS ACCESS SYSTEM DWS-3000 - Manual (Page 35)

Private Edge VLANs 35
3 Virtual LANs
To specify the handling of untagged frames on receipt use the LAN> L2 Features > VLAN >
Port Configuration page.
Figure 6. VLAN Port Configuration
Private Edge VLANs
Use the Private Edge VLAN feature to prevent ports on the switch from forwarding traffic to
each other even if they are on the same VLAN.
• Protected ports cannot forward traffic to other protected ports in the same group, even if
they have the same VLAN membership. Protected ports can forward traffic to unprotected
ports.
• Unprotected ports can forward traffic to both protected and unprotected ports.
You can also configure groups of protected ports. Each group’s configuration consists of a
name and a mask of ports. A port can belong to only one set of protected ports. An unprotected
port can be added to a group as a protected port.
The group name is configurable by the network administrator.
Use the switchport protected command to designate a port as protected. Use the show
switchport protected command to display a listing of the protected ports.