Private VLANs: Are these possible with HP 1810-8 Switch ?

[Filip Laburda]

Hi,

The goal is to create configuration where ports 2-8 can all talk to port 1, however they are NOT able to talk to each other

One of the process customer is trying to implement is:

     1. Create VLAN1  and include ports P1untag + P2untag and exclude rest of ports explicitly from this VLAN

     2. Create VLAN2  and include ports P1untag + P2untag

   however as he performs the later command when he checks the VLAN1 the P1untagged member is removed away from VLAN1

firmware:  PM.1.5

He has not found any other way how to configure private vlans.

The question is basically whether it is even possible to configure private VLAns with this switch. I went through

    1810 Switch v2 Management and Configuration Guide (Sep 2012)

and found nothing on this subject.

Thank you for any hint

Best Regards,

Filip Laburda

P.S.This thread has been moved from Switching > ProCurve / ProVision-Based to web & unmanaged forum.-HP forum moderator

[Vince_Whirlwind]

You can't have two VLANs both UNtagged on the same port.

The 1810 is a layer2 switch. Therefore, if you put 2-8 each in their own VLAN, untagged, than the ports are segregated from each other.

Then, you add all VLANs 2-8 to port 1 as tagged.

Whatever you have on port 1 (a router?, firewall?) will then need to provide a virtual interface for each VLAN and apply security to prevent traffic from crossing between VLANs.

[YenLin]

The goal you want to archeve should be used by protected port and unprotected port.

Config port 1 as unprotected port and 2-8 as protected port, them port 2 to port 8 can not communicate with each.

[Filip Laburda]

Hi YenLin

thank you for interesting point, but there is nowhere described that this switch has this functionality

I do not have one before me but customer claims he is not able to find it, all manuals and google also is silent on this kind of function at 1810 switch