38.1 Private VLAN Overview
Use private VLAN if you want you to block traffic between ports in the same VLAN. Community and
Isolated VLANs are secondary private VLANs that must be associated with a Primary private VLAN.
• Primary: Ports in a Primary VLAN are promiscuous and they can communicate with all promiscuous
ports in the same primary VLAN, and all ports in associated community and isolated VLANs. They
cannot communicate with ports in different primary VLANs.
• Community: Ports in a Community VLAN can communicate with promiscuous ports in an associated
Primary VLAN and other community ports in the same Community VLAN. They cannot communicate
with ports in Isolated VLANs, non-associated Primary VLAN promiscuous ports nor community ports in
different Community VLANs.
• Isolated: Ports in an Isolated VLAN can communicate with promiscuous ports in an associated Primary
VLAN only. They cannot communicate with other isolated ports in the same Isolated VLAN, non-
associated Primary VLAN promiscuous ports nor any community ports.
Table 177 PVLAN Graphic Key
LABEL
P-VLAN 100
C-VLAN 101
I-VLAN 102
Tagged Private VLANs can span switches but trunking ports must be VLAN-trunking ports – see
Chapter 38 Private VLAN
DESCRIPTION
Primary private VLAN
Community private VLAN
Isolated private VLAN
XS3800-28 User's Guide
393
C
H A P T E R
Private VLAN
38