Consider the network with the following trivial topology, which is a subset of a real network:
Server A is on VLAN 1, physically connected to port 1 on the switch. Server B is on VLAN 2, physically connected to port 8 on the switch. There is also an uplink/trunk port connected to port 4 on the switch.
The configuration of the switch is given in the screenshot below:
Server A is given PVID 1, but is also a member of tagged VLAN ID 2 (2T). Thus it should allow egress and ingress of frames tagged with VLAN ID 2 on physical port 1.
Server B is given PVID 2, which should tag all frames with VLAN ID 2 on ingress.
With this in mind I'm expecting server B to be able to ping server A. But this is not the case, server B cannot reach server A. Traffic on port 4 with tagged VLAN ID 2 also cannot reach server B.
My question is what is it with this configuration that prevents the switch from passing along tagged VLAN ID 2 traffic to port 1? Is it my misunderstanding of how VLAN works? If so, what is wrong with my understanding, and what is the correct setup?
It did occur to me that port 8 is only a member of VLAN ID 2, and traffic tagged with VLAN ID 1 (as in the ICMP echo reply which it is waiting for) would not pass through, making the connection unidirectional. But even after tagging port 8 with VLAN ID 1 (making it 1T,2U) there was no difference. Server B still couldn't ping server A.