VSP VOSS private vlan implementation (community vlan)

Micky — Mon, 13 Sep 2021 20:34:16 GMT

I’m trying to wrap my head around how private vlan is implemented in VOSS-VSP.

As far as I know there is no such thing as a “community” vlan like in Cisco configurations.

It seems like you can only have an isolated port which the can only talk to the primary vlan promiscuous port.

There seems to be no way to have multiple isolated ports talk to each other like in a “community” vlan.

I would like to achieve the following:

VLAN 10 = primary vlan

VLAN 11 = secondary vlan

VLAN 12 = secondary vlan

Port 1 = VLAN 10 promiscuous port (server attached)

Port 2 = VLAN 11 isolated port (client can talk to port 1 and 3)

Port 3 = VLAN 11 isolated port (client can talk to port 1 and 2)

Port 4 = VLAN 12 isolated port (client can talk to port 1 and 5)

Port 5 = VLAN 12 isolated port (client can talk to port 1 and 4)

This seems to not be possible in VOSS config as you can only associate 1 secondary vlan to the primary vlan for private vlan’s.

Am I seeming this correct or am I missing something here?

Thanks in advance for the feedback.

Re: VSP VOSS private vlan implementation (community vlan)

Ludovico_Steven — Mon, 13 Sep 2021 23:43:17 GMT

VOSS PVLAN does not support communities. You can’t do that. Isolated ports can only communicate with the promiscuous port.

EXOS does support PVLAN communities. If you have universal hardware maybe booting with EXOS can be a solution.

Micky — Tue, 14 Sep 2021 20:32:06 GMT

Thanks for the clarification.