Private Vlans - KTI Networks KGS-2421 User Manual

2.10 Private VLANs

A Private VLAN is a VLAN which contains switched ports that are restricted, such that they can only
communicate with a given "uplink", or called "Promiscuous port". The restricted ports are called "Isolated
ports". Each private VLAN typically contains many isolated ports, and a single uplink. The uplink will
typically be a switched port (or link aggregation group) connected to a router, firewall, server, provider
network, or similar central resource.
Types of Ports in a private VLAN
Promiscuous:
Isolated:
By default, all ports are VLAN unaware and members of VLAN 1 and Private VLAN 1. A VLAN unaware
port can only be a member of one VLAN, but it can be a member of multiple Private VLANs.
Usually connects to a router – a type of a port which is allowed to send and receive
frames from any other port on the VLAN.
This type of port is only allowed to communicate with Promiscuous ports. Isolated
ports are not allowed to communicate to each other. This type of ports usually
connects to hosts.
-68-