Intellinet 560931, Руководство пользователя

Страница: 125 / 281

4.14 Private VLANs
The Private VLAN feature provides the ability to extend the capabilities of a "standard" VLAN. The
additional concepts — Primary VLAN, Community VLAN and Isolated VLAN — are introduced in
Private VLAN.
The Primary VLAN can be considered the master in the master/slave relationship with the other two
sub-types, Community VLAN and Isolated VLAN. The switch Ports assigned with the primary VLAN are
able to access the ports in the two sub-tyupes.
Both the Community VLN and Isolated VLAN can be considered slaves in the master/slave relationship
with the primary VLAN. The switch ports assigned to a Community VLAN can see traffic from all other
devices in the same Community. The switch ports assigned to an Isolated VLAN can send traffic to the
primary VLAN, but CANNOT see traffic from other devices in the same Isolated VLAN.
In this section, the switch allows you to assign Private VLAN Member Configuration and Port Isolation
Configuration.
4.14.1 Private VLAN Membership Configuration
The Private VLAN membership configurations for the switch can be monitored and modified here.
Private VLANs can be added or deleted here. Port members of each Private VLAN can be added or
removed here.
Private VLANs are based on the source port mask, and there are no connections to VLANs. This
means that VLAN IDs and Private VLAN IDs can be identical.
A port must be a member of both a VLAN and a Private VLAN to be able to forward packets. By default,
all ports are VLAN unaware and members of VLAN 1 and Private VLAN 1.
A VLAN-unaware port can only be a member of one VLAN, but it can be a member of multiple Private
VLANs.
Private VLANs do not work across the stack.
Delete
To delete a private VLAN entry, check this box. The entry will be deleted during the next save.
Private VLAN ID
Indicates the ID of this particular private VLAN.
Port Members