User Manual

Managing Device Security
444
M6100 Web Management User Guide
Protected Ports Configuration
If a port is configured as protected, it does not forward traffic to any other protected port on
the switch, but it will forward traffic to unprotected ports. Use the Protected Ports
Configuration page to configure the ports as protected or unprotected. You need read-write
access privileges to modify the configuration.
To display the Protected Ports Configuration page, click the Security
 Traffic Control 
Protected Ports.
To configure protected ports:
1. Use Group ID to identify a group of protected ports that can be combined into a logical
group.
Traffic can flow between protected ports belonging to different groups, but not
within the same group. The selection box lists all the possible protected port Group IDs
supported for the current platform. The valid range of the Group ID is 0 to 2.
2. Use the optional Group Name field to associate a name with the protected ports group
(used for identification purposes). It can be up to 32 alphanumeric characters long, including
blanks. The
default is blank. This field is optional.
3. Click the orange bar to display the available ports.
4. Click the box below each port to configure as a protected port.
The selection list consists of
physical ports, protected as well as unprotected. The protected ports are tick-marked to
differentiate between them. No traffic forwarding is possible between two protected ports. If
left unconfigured, the default state is unprotected.
5. Click Update to update the page with the latest information on the switch.
6. Click Cancel to cancel the configuration on the screen and reset the data on the screen to
the latest value of the switch.
7. If you make changes to the page, click Apply to apply the changes to the system.
Configuration changes take ef
fect immediately.
Private VLAN
A private VLAN contains switch ports that cannot communicate with each other, but can
access another network. These ports are called private ports. Each private VLAN contains
one or more private ports and a single uplink port or uplink aggregation group. Note that all
traffic between private ports is blocked at all layers, not just Layer 2 traffic, but also traffic
such as FTP, HTTP, and Telnet.