PLANET WGSW-28040P - Manual (Page 79)

User’s Manual of WGSW-28040 / 28040P / 28040P4
79
4.3.7 Protected Ports
Overview
When a switch port is configured to be a member of protected group (also called Private VLAN), communication between
protected ports within that group can be prevented. Two application examples are provided in this section:
• Customers connected to an ISP can be members of the protected group, but they are not allowed to communicate with
each other within that VLAN.
• Servers in a farm of web servers in a Demilitarized Zone (DMZ) are allowed to communicate with the outside world and
with database servers on the inside segment, but are not allowed to communicate with each other
For protected port group to be applied, the Managed switch must first be configured for standard VLAN operation. Ports in a
protected port group fall into one of these two groups:
 Promiscuous (Unprotected) ports
— Ports from which traffic can be forwarded to all ports in the private VLAN
— Ports which can receive traffic from all ports in the private VLAN
 Isolated (Protected) ports
— Ports from which traffic can only be forwarded to promiscuous ports in the private VLAN
— Ports which can receive traffic from only promiscuous ports in the private VLAN