[c-nsp] Secondary VLAN deployment on Metro ETTH

[Karol Mares]

On Wed, Nov 25, 2009 at 12:17 PM, Pavel Skovajsa
<pavel.skovajsa at gmail.com>wrote:

> Hi,
>
> yes that is right UNI ports can't talk to each other but only within one
> ME3400 switch. If you have more switches and want exactly the same
> "switchport protected" functionality on all of them, one solution is to
> implement PVLANs.
>
> See
> http://www.rfc-editor.org/internet-drafts/draft-sanjib-private-vlan-10.txtfor
> example.
>
>
>
That would not help if you have interconnection between several switches i.e
ring topology. You would need to use private-vlan turnk functionality which
is iirc not supported yet on Cisco 3400 to be able to isolated several vlans
between switches.

You can use just one private-vlan host or combination of UNI - NNI port type
chain between the switches. downlink UNI, uplink NNI and to use proxy-ARP to
take care of communication between the hosts.

--
iso