We have the following configuration:
Trunk
Trunk <-------> Cat2980
Cat6509 <-------> Cat5000 <-------> Cat2980 <----> Machine
<-------> Cat2980
VLAN260 is a primary VLAN and VLAN901 is a isolated secondary VLAN. PVLAN function is activated on both Cat6509 and Cat2980 but Cat5000 cannot support this function. We found that packets from Cat2980 to Cat5000 were sent on VLAN901. Cat5000 also forwarded the packets to Cat6509 on VLAN901. However, the source mac address is found on VLAN260 at Cat6509.
If there is a packet sent to the machine from Cat6509, Cat6509 will forward the packet to Cat5000 on VLAN260. However, Cat5000 cannot find the mac address on VLAN260 and will forward the packet on VLAN260 to all Cat2980. Therefore, unicast flooding is found on all Cat2980 except the one connected to the machine. In other words, other machines on other Cat2980 will receive the traffic to this machine.
Is there any work around for this case? I think the problem may be solved if Cat6509 can forward the packet on VLAN901 instead of VLAN260.
Thanks.