Private Vlan; Chapter 33 Private Vlan; Private Vlan Overview - ZyXEL Communications XGS3700-48 User Manual

33.1 Private VLAN Overview

Use private VLAN if you want you to block traffic between ports in the same VLAN. Community and
Isolated VLANs are secondary private VLANs that must be associated with a Primary private
VLAN.
• Primary: Ports in a Primary VLAN are promiscuous and they can communicate with all
promiscuous ports in the same primary VLAN, and all ports in associated community and isolated
VLANs. They cannot communicate with ports in different primary VLANs.
• Community: Ports in a Community VLAN can communicate with promiscuous ports in an
associated Primary VLAN and other community ports in the same Community VLAN. They
cannot communicate with ports in Isolated VLANs, non-associated Primary VLAN promiscuous
ports nor community ports in different Community VLANs.
• Isolated: Ports in an Isolated VLAN can communicate with promiscuous ports in an associated
Primary VLAN only. They cannot communicate with other isolated ports in the same Isolated
VLAN, non-associated Primary VLAN promiscuous ports nor any community ports.
Table 163 PVLAN Graphic Key
LABEL
P-VLAN 100
C-VLAN 101
I-VLAN 102
C
HAPTER
DESCRIPTION
Primary private VLAN
Community private VLAN
Isolated private VLAN
GS3700/XGS3700 Series User's Guide
336
3 3

Private VLAN