topic Re: HP procurve vid/pvid question in Switches, Hubs, and Modems

HP procurve vid/pvid question

mpupovac — Thu, 05 Mar 2009 19:13:51 GMT

Hi!
I'm using a HP procurve switch as a layer 2 switch. Is there a way to segment this switch without using IEEE 802.1Q VLANs (for example stuff that comes to port 1 can o-n-l-y come out on port 2 and nowhere else)?
To be more specific, i'm looking for a feature that is supported on D-Link switches, which adds pvid (port vlan id - maybe some proprietary protocol?) to each packet in ingress direction regardless if it has IEEE 802.1Q tag or not. So these packets can exit only on ports that have the same pvid assigned and each port can have only one pvid assigned.

Re: HP procurve vid/pvid question

mpupovac — Thu, 05 Mar 2009 19:29:21 GMT

To be even more specific my problem is the following: i'm sending IEEE 802.1Q tagged packet which is looped on my device but with a different IEEE 802.1Q vlan tag. For some reason the HP procurve switch floods all ports with that packet , which is not good for my network.

Re: HP procurve vid/pvid question

Lei.Ma — Fri, 06 Mar 2009 00:56:56 GMT

what's your switch ?

i used to work out with port-isolation in 2524 and i don't think this is about pvid. vid and pvid are all about 802.1q. pvid is supposed like private vlan in 802.1q.

hostname "HP ProCurve Switch 2524"
port-isolation
port-isolation ethernet 1-23 mode private

Re: HP procurve vid/pvid question

Lei.Ma — Fri, 06 Mar 2009 01:02:02 GMT

please check the layout file

Re: HP procurve vid/pvid question

mpupovac — Fri, 06 Mar 2009 08:43:07 GMT

My switch is ProCurve Switch 3500yl-48G, but it seems it doesn't have port-isolation.

ProCurve Switch 3500yl-48G# port-isolation
Invalid input: port-isolation

Re: HP procurve vid/pvid question

Matt Hobbs — Sat, 07 Mar 2009 03:43:42 GMT

source-port filter is probably the closest you'll get to this feature.

Re: HP procurve vid/pvid question

mpupovac — Mon, 09 Mar 2009 08:21:33 GMT

This is exactly what i wanted. Thanks for the input. I used the commands :

filter source-port 2,17,18 drop 1,3-16,19-48
filter source-port 1,3-16,19-48 drop 2,17,18

to isolate ports 2,17 and 18 from the rest of the world.

Re: HP procurve vid/pvid question

mpupovac — Mon, 09 Mar 2009 08:22:52 GMT

Thread closed.