Chapter 6: VLANs

Protected Ports VLAN

You use the protected ports VLAN feature when you want to prevent ports from communicating with one another, but you want them all to have access to common resources. For example, in a hotel or apartment complex, the computer in each room or apartment needs to be isolated from one another, but they all need access to the internet or a server. This feature is called traffic segmentation. You set up traffic segmentation by selecting the ports connected to each room or apartment and identifying them as isolated ports, and then connecting one port to the WAN.

In Figure 19, the connection to the WAN is assigned to fiber port 8. This port is configured as the Primary (Ingress) port for the switch. Because it is the Primary port, it has full duplex capability to communicate with ports 1- 7R. Ports 1-7R are configured to be isolated from one another, and therefore cannot communicate with one another.

912WAN

Figure 19. Protected Ports VLAN Example

Figure 20 shows what the Protected Port page for Figure 19 looks like.

Figure 20. Protected Port Page for Figure 19

To set up a protected ports VLAN, perform the following procedure:

50

Page 50
Image 50
Allied Telesis AT-GS950/8 manual Protected Ports Vlan Example