HP VPN Firewall Appliances Network Management Configuration Guide

34
Figure 16 Network diagram
PVID
By default, VLAN 1 is the port VLAN ID (PVID) for all ports. You can configure the PVID for a port as
required.
When you configure the PVID on a port, follow these guidelines:
• An access port can join only one VLAN. The VLAN to which the access port belongs is the PVID of
the port.
• A trunk or hybrid port can join multiple VLANs, and you can configure a PVID for the port.
• You can use a nonexistent VLAN as the PVID for a hybrid or trunk port, but not for an access port.
After you use the undo vlan command to remove the VLAN where an access port resides, the PVID
of the port changes to VLAN 1. The removal of the VLAN specified as the PVID of a trunk or hybrid
port, however, does not affect the PVID setting on the port.
• HP recommends that you set the same PVID for local and remote ports.
• Make sure a port permits the traffic from its PVID to pass through. Otherwise, when the port receives
frames tagged with the PVID or untagged frames, the port drops these frames.
Frame handling on a port
The following table shows how ports of different link types handle frames:
Actions Access Trunk H
y
brid
Incoming
untagged
frame
Tags the frame with the
PVID tag.
Determines whether the PVID is permitted on the port, as follows:
• If yes, tags the frame with the PVID tag.
• If not, drops the frame.
VLAN 2
VLAN 3
VLAN 2
VLAN 3
Access links are required
Trunk links are reuqired
Hybrid links are required
Device A
Device B Device C