KYLAND Technology SICOM3024P, Web Operation Manual

Page: 46 / 147

Advanced Configuration
39
Configurations on Switch A and Switch B:
1. Create VLAN 2, add port 1 and port 2 to VLAN 2 as Untag ports, and add port 7 into VLAN
2 as Tag port, as shown in Figure 33.
2. Create VLAN 100, add port 3 and port 4 to VLAN 100 as Untag ports, and add port 7 into
VLAN 100 as Tag port, as shown in Figure 33.
3. Create VLAN 200, add port 5 and port 6 into VLAN 200 as Untag ports, and add port 7 into
VLAN 200 as Tag port, as shown in Figure 33.
6.3 PVLAN
6.3.1 Overview
Private VLAN (PVLAN) uses two layers isolation technologies to realize the complex port
traffic isolation function, achieving network security and broadcast domain isolation.
The upper VLAN is a shared domain VLAN in which ports are uplink ports. The lower VLANs
are isolation domains in which ports are downlink ports. Downlink ports can be assigned to
different isolation domains and they can communicate with the uplink port at the same time.
Isolation domains cannot communicate with each other.
Figure 38 PVLAN Application
As shown in the preceding figure, the shared domain is VLAN 100 and the isolation domains
are VLAN 10 and VLAN 30; the devices in the isolation domains can communicate with the
device in the shared domain, such as VLAN 10 can communicate with VLAN 100; VLAN 30
can also communicate with VLAN100, but the devices in different isolation domains cannot
communicate with each other, such as VLAN 10 cannot communicate with VLAN 30.