Ruijie RG-S2900G-E Series, Configuration Manual

Page: 205 / 943

Configuration Guide Private VLAN Configuration
but the packets in the isolated VLAN received on the Trunk Port cannot be
forwarded to the isolated port.
The VID for the tagged packet forwarded from the promiscuous port to the the
isolated trunk port, is the VID for the secondary VLAN.
Community port, a port in the community VLAN, can communicate with other
community ports in the same community VLAN as well as the promiscuous port
in the primary VLAN. However, they cannot communicate with the community
ports in other community VLANs and isolated ports in the isolated VLANs.
The following list shows the packet forwarding relationship between various port
types:
Output Port
Input Port
Promiscuous
Port
Isolated
Port
Community
Port
Isolated Trunk
Port (In the
same VLAN)
Trunk Port
(In the
same
VLAN)
Promiscuous port
√ √ √ √ √
Isolated Port
√
X X X
√
Community
Port
√
X
√ √ √
Isolated Trunk
Port (In the same
VLAN)
√
X
√
X
√
Trunk Port (In the
same VLAN)
√
X
√
X
√
In a private VLAN, an SVI interface can be created for the primary VLAN rather
then the secondary VLANs.
A port in the private VLAN can be a SPAN source port instead of a mirrored
destination port.
Configuring a Private VLAN
Default Private VLAN Configuration
No Private VLAN is configured by default.