84
4.6
Private VLAN
The private VLAN helps to resolve the primary VLAN ID shortage, client ports’ isolation and
network security issues. The Private VLAN provides primary and secondary VLAN within a
single switch.
Primary VLAN:
The uplink port is usually the primary VLAN. A primary VLAN contains
promiscuous ports that can communicate with lower Secondary VLANs.
Secondary VLAN:
The client ports are usually defined within secondary VLAN. The
secondary VLAN includes Isolated VLAN and Community VLAN. The client ports can be
isolated VLANs or can be grouped in the same Community VLAN. The ports within the
same community VLAN can communicate with each other. However, the isolated VLAN
ports can Not.
The figure shows the typical Private VLAN network. The SCADA/Public Server or NMS
workstation is usually located in primary VLAN. The clients PCs or Rings are located within
Secondary.
Private VLAN (PVLAN) Configuration group enables you to Configure PVLAN, PVLAN Port
and see the PVLAN Information.
Following commands are included in this group:
4.6.1 PVLAN Configuration
4.6.2 PVLAN Port Configuration
4.6.3 PVLAN Informtion
4.6.4 CLI Commands of the PVLAN
4.6.1
PVLAN Configuration
PVLAN Configuration allows you to assign Private VLAN type. After created VLAN in VLAN
Configuraiton page, the available VLAN ID will display here. Choose the Private VLAN
types for each VLAN you want configure.
None:
The VLAN is Not included in Private VLAN.
Primary:
The VLAN is the Primary VLAN. The member ports can communicate with
secondary ports.
Isolated:
The VLAN is the Isolated VLAN. The member ports of the VLAN are isolated.