Unsolved
This post is more than 5 years old
3 Posts
0
8510
August 15th, 2005 17:00
PowerConnect 3424 VLAN Basics
I am in the process of implementing a PowerConnect 3424 for our office and have a quick (hopefully) question to ask - as I am having trouble finding the answer in the documentation. Can a port be a member of multiple VLANs and if so how is this configured? My scenario is as follows:
I have three machines A, B, and C I need A to be able to talk with B and C but cannot have B and C talk directly with each other. My thought was to set up 2 VLANs 1 would have A and B as memembers and the other would have A and C as members is this possible?
Currently I have configured A (port e2, PVID 5) and B (port e10, PVID 5) as Untagged members of VLAN 5. That appears to work as expected. I attempted to add A and C (port e12, PVID 10) as Untagged members of VLAN 10 but this doe not work as expected - I assume this is due to the PVID of port e2 but am not sure.
Thanks in advance.
GregM_1
2 Intern
•
112 Posts
0
August 15th, 2005 18:00
Raytri3,
You are on the correct path and have nailed your issue down: The PVID is breaking this scenario. The PVID is used to define what VLAN to put untagged traffic into when it enters the switch, hence why you cannot have more than one PVID.
We used to have a trick called port-overlap to do what you are trying to achieve, but this solution was awkward, poor, and not secure.
You are in luck though, the PC34xx series supports a new feature called Private VLANs, this was designed to do exactly what you are looking for. Check the online user guide at:
<ADMIN NOTE: Broken link has been removed from this post by Dell>
In your case machine A would be a 'community' port and machines B and C would be 'isolated' ports.
Good luck!
raytri3
3 Posts
0
August 15th, 2005 19:00
GregM,
Thanks for the quick response. I read through the documentation on the Private VLANs and now have mre questions: Your comments about port A being a community Port and B &C being isolated ports - I am assuming that is in the "Port Settings" section. I deleted all the previously assigned VLANs and added A to PV-Community and ports B & C to PV-Isolated (leaving them on the default VLAN1); however when I did A could no longer communicate with B or C. This makes me think that I have to follow the steps in the documentation to setup PVLANs - and create a community/isolated VLAN. Is there any better documentation than the "user guide" you provided a link to. Being new to the concept of PVLANs I would really love to see an example. I will dig further and may have more questions soon.
Thanks in advacne.
Raytri3