Hi

I think what your referring to is a feature called Private VLAN Edge, which is a feature available on the PC6024 switches, but not on the 5324. With the Private VLAN feature you can configure protected ports. A protected port does not forward any traffic (unicast, multicast, or broadcast) to any other port that is also a protected port in the same switch. Traffic cannot be forwarded between protected ports at Layer 2, all traffic passing between protected ports must be forwarded through a Layer 3 (L3) device.

Now, as I said unfortunately this feature is not available on the PC5324 but depending on what you want you could do the following:

1. Assign ports 1-12 into VLAN10
2. Assign ports 13-24 into VLAN20


This would effectively split the switch into 2 networks, and if you do not have any Layer3 device routing between these vlans they are isolated from each other, but maybe this is not what your looking for, if you could provide a little more detail I might be able to help further.

Hope this helps

Hi

I think your idea will work as long as you do not want any of your clients in the 10.100.1.x subnet to be able to communicate to any other subnet. So for example, lets assume your existing PC5324 is configured in the following way:-

PC5324-1 - VLAN100 - 10.1.1.x


Now on the second PC5324, you only need to do the following:-

1. Create VLAN100
2. Assign ports 1-12 to VLAN100
3. Create the L3 VLAN100 interface and assign an IP address in the 10.1.1.x range.
4. Leave ports 13-24 in VLAN1 these can be used for your 10.100.1.x subnet.
5. Connect your PC5324-2 switch to the first switch using a port which is a member of VLAN100.

And that should be it, any client in the 10.1.1.x subnet on either switch should be able to communicate. Anything in the 10.100.1.0 subnet will be able to communicate within the VLAN but not to any other subnet.

Hope this helps.