Transition Networks
S4224 Web User Guide
33558 Rev. C
Page 276 of 669
Private VLANs Configuration
The S4224 lets you configure Private VLANs from the
Configuration
>
Private
VLANs
menu path.
Here you can configure the ‘PVLAN Membership’ and the ‘Port Isolation’ sub-menu functions.
In a private VLAN, PVLANs provide layer 2 isolation between ports within the same broadcast domain.
Isolated ports configured as part of PVLAN cannot communicate with each other. Member ports of a
PVLAN can communicate with each other.
PVLAN Membership
S4224 Private VLAN membership configuration can be monitored and modified here. Private VLANs can
be added or deleted here. Port members of each Private VLAN can be added or removed here.
Private VLANs are based on the source port mask, and there are no connections to VLANs. This means
that VLAN IDs and Private VLAN IDs can be identical.
A port must be a member of both a VLAN and a Private VLAN to be able to forward packets. By default,
all ports are VLAN unaware and members of VLAN 1 and Private VLAN 1.
A VLAN unaware port can only be a member of one VLAN, but it can be a member of multiple Private
VLANs.
From the default page, click the “
Add New Private VLAN
” button to display the entry table.
This page lets you:
Monitor and modify S4224 Private VLAN membership configurations,
Add or delete Private VLANs, and
Add or delete Private VLAN Port Members.
Private VLANs are based on the source port mask, and there are no connections to VLANs. This means
that VLAN IDs and Private VLAN IDs can be identical.
A port must be a member of both a VLAN and a Private VLAN to be able to forward packets. By default,
all ports are VLAN unaware and members of VLAN 1 and Private VLAN 1.
A VLAN unaware port can only be a member of one VLAN, but it can be a member of multiple Private
VLANs.
The VLAN Port configuration table parameters are explained below.