Comware

Hi!
I'm using a HP procurve switch as a layer 2 switch. Is there a way to segment this switch without using IEEE 802.1Q VLANs (for example stuff that comes to port 1 can o-n-l-y come out on port 2 and nowhere else)?
To be more specific, i'm looking for a feature that is supported on D-Link switches, which adds pvid (port vlan id - maybe some proprietary protocol?) to each packet in ingress direction regardless if it has IEEE 802.1Q tag or not. So these packets can exit only on ports that have the same pvid assigned and each port can have only one pvid assigned.

To be even more specific my problem is the following: i'm sending IEEE 802.1Q tagged packet which is looped on my device but with a different IEEE 802.1Q vlan tag. For some reason the HP procurve switch floods all ports with that packet , which is not good for my network.

what's your switch ?

i used to work out with port-isolation in 2524 and i don't think this is about pvid. vid and pvid are all about 802.1q. pvid is supposed like private vlan in 802.1q.

hostname "HP ProCurve Switch 2524"
port-isolation
port-isolation ethernet 1-23 mode private

please check the layout file

My switch is ProCurve Switch 3500yl-48G, but it seems it doesn't have port-isolation.

ProCurve Switch 3500yl-48G# port-isolation
Invalid input: port-isolation

source-port filter is probably the closest you'll get to this feature.

This is exactly what i wanted. Thanks for the input. I used the commands :

filter source-port 2,17,18 drop 1,3-16,19-48
filter source-port 1,3-16,19-48 drop 2,17,18

to isolate ports 2,17 and 18 from the rest of the world.

Thread closed.