Home / server / Questions / 606585
Accepted
Morten Siebuhr
Asked: 2014-06-20 13:03:12 +0800 CST

Private VLANs/Port Isolation on HP ProCurve 2524

  • 772

I am trying to set up Private VLANs (as described on Wikipedia) on a HP ProCurve 2524, but I can't find any references to it in the online manual.

Searching the internet hasn't yielded much either (my google-fu is weak here) though I've found some vague hints that the switch might not support it at all.

Can anybody give me pointers? (Am I looking all the wrong places? Does the feature have a different name in HP-lingo? Or do I have to buy a new switch to get support?)

Edit: It is to be used in a condominium with ~20 apts, so it's all about protecting the users from malconfigured wifi routers and other idiocies. The switch sit behind a Soekris/PFSense firewall that takes care of NAT/QoS/DHCP.

Edit №2: It all turned out to be fairly simple. After updating the switch firmware (hooray for HP doing free updates 10+ years after initial release!), it's done thusly:

> config
> port-isolation
Answer ‘y’
> port-isolation e 1-22 mode private
> show port-isolation
> write memory

Now ports 1-22 (residents) can only talk to port 23/24 (router/debug port).

vlan

1 Answers

  1. Best Answer

    Not all switches support private VLAN's. I don't believe the 2524 provides full private VLAN support. Some of the later firmware versions did introduce port isolation, but there are some significant limitations when using port isolation like:

    • Port Isolation is intended only for networks that do not use VLAN tagging. (The switch must be in the default VLAN configuration before you configure port-isolation.)
    • Multiple VLANs are not allowed on the switch. If multiple VLANs exist on the switch, delete them and return the ports to the original default configuration as untagged members of VLAN 1. (VLAN configuration changes are not supported if port-isolation is running on the switch.)

    The latest release notes contains more information on port isolation and how to configure it.

    • 2