Filter
Top Products
PowerConnect B-Series FCX Configuration Guide 495
53-1002266-01
Configuring private VLANs
13
Enabling broadcast or unknown unicast traffic
to the PVLAN
To enhance PVLAN security, the primary PVLAN does not forward broadcast or unknown unicast
packets to its community and isolated VLANs, and other ports in the primary VLAN. For example, if
port 3/2 in Figure 105 on page 489 receives a broadcast packet from the firewall, the port does
not forward the packet to the other PVLAN ports (3/5, 3/6, 3/9, and 3/10).
This forwarding restriction does not apply to traffic from the PVLAN. The primary port does forward
broadcast and unknown unicast packets that are received from the isolated and community VLANs.
For example, if the host on port 3/9 sends an unknown unicast packet, port 3/2 forwards the
packet to the firewall.
If you want to remove the forwarding restriction, you can enable the primary port to forward
broadcast or unknown unicast traffic, if desired, using the following CLI method. You can enable or
disable forwarding of broadcast or unknown unicast packets separately.
NOTE
On Layer 2 Switches and Layer 3 Switches, you also can use MAC address filters to control the traffic
forwarded into and out of the PVLAN. In addition, if you are using a Layer 2 Switch, you also can use
ACLs.
NOTE
PowerConnect B-Series FCX devices do not support ACLs on interface groups.
Command syntax
To configure the ports in the primary VLAN to forward broadcast or unknown unicast and multicast
traffic received from sources outside the PVLAN, enter the following commands at the global
CONFIG level of the CLI.
PowerConnect(config)# pvlan-preference broadcast flood
PowerConnect(config)# pvlan-preference unknown-unicast flood
These commands enable forwarding of broadcast and unknown-unicast packets to ports within the
PVLAN. To again disable forwarding, enter a command such as the following.
PowerConnect(config)# no pvlan-preference broadcast flood
This command disables forwarding of broadcast packets within the PVLAN.
Syntax: [no] pvlan-preference broadcast | unknown-unicast flood
NOTE
The pvlan-preference broadcast and pvlan-preference unknown-unicast commands are not
supported on the PowerConnect B-Series FCX platform. These are supported for all the other
PowerConnect platforms.
Table 80 lists the platforms that support Hardware forwarding PVLAN.
TABLE 80 Supported platforms for Hardware forwarding PVLAN
Product Untagged port Tagged port Switch-link
PowerConnect B-Series
FCX family
Supported Supported Supported