NS3503-16P-4C User Manual
82
For protected port group to be applied, the Managed switch must first be configured for standard VLAN
operation. Ports in a protected port group fall into one of these two groups:
Promiscuous (Unprotected) ports
— Ports from which traffic can be forwarded to all ports in the private VLAN
— Ports which can receive traffic from all ports in the private VLAN
Isolated (Protected) ports
— Ports from which traffic can only be forwarded to promiscuous ports in the private VLAN
— Ports which can receive traffic from only promiscuous ports in the private VLAN
The configuration of promiscuous and isolated ports applies to all private VLANs. When traffic comes in
on a promiscuous port in a private VLAN, the VLAN mask from the VLAN table is applied. When traffic
comes in on an isolated port, the private VLAN mask is applied in addition to the VLAN mask from the
VLAN table. This reduces the ports to which forwarding can be done to just the promiscuous ports within
the private VLAN.
The port settings relate to the currently unit, as reflected by the page header. The Port Isolation
Configuration screens in Figure 4-3-16 and Figure 4-3-17 appear.