Multiple tagged and untagged support for PVLANs
Brocade FastIron devices allow users to configure primary or secondary VLAN ports in multiple primary or secondary VLANs of the same type in other PVLAN domains. Configuring a tagged port as a dual-mode port allows it to accept and transmit both tagged and untagged traffic at the same time. A dual-mode port accepts and transmits frames belonging to VLANs configured for the port as well as frames belonging to the port default VLAN (untagged traffic).
NOTE
After adding secondary VLAN ports to multiple secondary VLAN ports of the same type, if the Brocade device is downgraded to FastIron 08.0.40 or older versions, errors are generated during parsing as this is not supported prior to FastIron 08.0.50 releases.
Private VLANs allow Layer 2 segregation and also minimizes usage of system VLANs. Using dual-mode ports in a private VLAN enables same ports to carry data or voice traffic.
The following matrix provides information about possible configurations that are allowed in a PVLAN.
NOTE
All user configurations beyond the scope of the table will either not be allowed or will generate a warning message.
| PVLAN port | Port type | Primary VLAN of other PVLAN | Isolated VLAN of the other PVLAN | Other community VLAN of the same PVLAN | Community VLAN of the other PVLAN | Regular VLAN | |||
|---|---|---|---|---|---|---|---|---|---|
| Tagged | Untagged | Dual-mode | Promiscuous ports | ISL ports | |||||
| Promiscuous ports | Yes | Yes | Yes | Yes | No | No | No | No | No |
| Inter Switch Link (ISL) ports | Yes | No | No | No | Yes | No | No | No | No |
| Isolated VLAN ports | Yes | Yes | Yes | NA | NA | Yes | No | No | No |
| Community VLAN ports | Yes | Yes | Yes | NA | NA | No | No | Yes | No |