NETGEAR AV Line M4250 GSM4210PX 8-Port Gigabit PoE+ Compliant Managed AV Switch with SFP (220W) - Manual (Page 577)

• Community port: The port is a host port that is a member of a community VLAN (a
secondary VLAN within the private VLAN) and that can communicate with other
community ports and promiscuous ports.
• Isolated port: The port is a host port that is a member of an isolated VLAN (a
secondary VLAN within the private VLAN) and that can communicate with
promiscuous ports only.
• Promiscuous trunk port: The port is both an uplink trunk port (for example, it can
connect a router) and a promiscuous port that can be a member of multiple primary
VLANs (within the private VLAN) as well as regular VLANs. The port processes tagged
traffic to communicate with all types of ports in private VLANs (including promiscuous
ports, community ports, and isolated ports) and with ports in regular VLANs.
• Isolated trunk port: The port is both a downlink trunk port (for example, it can
connect to multiple downstream devices) and can be a member of multiple isolated
VLANs (secondary VLANs within private VLANs) as well as regular VLANs. The port
processes tagged traffic to communicate with ports in isolated VLANs and with ports
in regular VLANs. The downstream devices that are connected to the isolated trunk
port do not need to be capable of supported private VLANs.
Overview of the tasks for private VLAN configuration
To set up a private VLAN that allows for communication between switches in a network,
perform the tasks that are described in the following sections:
1. Assign a private VLAN type to a VLAN on page 578.
By default, a VLAN is a regular VLAN, so you must assign a private VLAN type to a
VLAN.
2. Configure a private VLAN association with a primary and secondary VLAN on page
579.
A private VLAN must consist of a single primary VLAN and one or more secondary
VLANs.
3. Configure the private VLAN port mode on page 581.
A port must be in the correct port mode to participate in a private VLAN. For example,
to make a port a member of an isolated VLAN or community VLAN, you must first
configure the port as a host port.
4. Private VLAN host interface: Assign the interface to primary and secondary VLANs
on page 583.
For a port that you configured to function in host mode, configure a single primary
VLAN and a single secondary VLAN.
Main User Manual 577 Manage Switch Security
AV Line of Fully Managed Switches M4250 Series Main User Manual