Hi,

I want to segregate the internet line for credit card machine due to PIC compliance vlan segmentation. see my current configuration for VLAN setup using TL-SG1024D. 

I crated two groups. At the end I am looking to separate VLAN group A and B so that they can't talk to each other. 

VLAN 1 - kept 1-24 untaged as default

VLAN 2 - 1-2 untagged 

VLAN 3 - 1,3 untagged  

and did 802.1Q PVID Setting as

Port 1 - PVID 1

Port 2 - PVID 2

Port 3 - PVID 3

C:\Users\Laptop>ping 192.168.0.2

Pinging 192.168.0.2 with 32 bytes of data:
Reply from 192.168.0.2: bytes=32 time<1ms TTL=128
Reply from 192.168.0.2: bytes=32 time<1ms TTL=128
Reply from 192.168.0.2: bytes=32 time<1ms TTL=128
Reply from 192.168.0.2: bytes=32 time<1ms TTL=128

Ping statistics for 192.168.0.2:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms

C:\Users\Desktop>ping 192.168.0.5

Pinging 192.168.0.5 with 32 bytes of data:
Reply from 192.168.0.2: Destination host unreachable.
Reply from 192.168.0.2: Destination host unreachable.
Reply from 192.168.0.2: Destination host unreachable.
Reply from 192.168.0.2: Destination host unreachable.

Ping statistics for 192.168.0.5:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

can you please review my setting and tell me what am i doing wrong here so it's able access my Desktop from Laptop (VLAN group A CAN ping to group B)?

802.1Q PVID Setting

Thank you very much in advance!