Allied Telesis AT-GS950/48, User Manual, Page: 163 / 410

AT-GS950/48 Web Interface User Guide
163
Forwarding Ports
Forwarding ports of a private port VLAN can only forward traffic to, and
receive traffic from, a source port, and are prohibited from forwarding
traffic to each other. A private port VLAN can have any number of
forwarding ports on the switch, up to all the ports, minus the source port.
Forwarding ports cannot be members of static port trunks or LACP trunks.
A port can be a forwarding port of only one private port VLAN at a time.
Forwarding ports are untagged. VLAN membership is defined by their
PVIDs, which are equivalent to the ID of the VLANs. The devices to which
they are connected should not send tagged packets.
Source Port
The source port can communicate with all of the forwarding ports in its
VLAN. A private port VLAN can have only one source port, but it can be
any port on the switch. A port can be a source port of just one private port
VLAN at a time. The source port cannot be a static port trunk or an LACP
trunk.
The source port is untagged. It does not include tagged VLAN information
in the packets that it forwards to forwarding ports or the device to which it
is connected. Thus, its network counterpart should not send tagged
packets.
General Rules for Creating a Private VLAN
Here is a summary of general rules to observe when creating private port
VLANs:
 A private port VLAN can have any number of
forwarding ports, up to all the ports on the switch,
minus the source port.
 A private port VLAN can have only one source port.
 The forwarding and source ports of private port VLANs
are untagged ports, and as such, transmit only
untagged traffic.
 The switch can support private, port-based, tagged,
and MAC address-based VLANs simultaneously.

The forwarding ports and the source port of a private
port VLAN cannot belong to static port trunks or LACP
trunks.
 Ports can be forwarding or source ports of only one
private port VLAN simultaneously.
 Ports cannot be members of both private port VLANs
and port-based or tagged VLANs simultaneously.