Private Vlan; Chapter 32 Private Vlan; Private Vlan Overview - ZyXEL Communications GS3700 Series User Manual

32.1 Private VLAN Overview

Use private VLAN if you want you to block traffic between ports in the same VLAN. Community and
Isolated VLANs are secondary private VLANs that must be associated with a Primary private
VLAN.
• Primary: Ports in a Primary VLAN are promiscuous and they can communicate with all
promiscuous ports in the same primary VLAN, and all ports in associated community and isolated
VLANs. They cannot communicate with ports in different primary VLANs.
• Community: Ports in a Community VLAN can communicate with promiscuous ports in an
associated Primary VLAN and other community ports in the same Community VLAN. They
cannot communicate with ports in Isolated VLANs, non-associated Primary VLAN promiscuous
ports nor community ports in different Community VLANs.
• Isolated: Ports in an Isolated VLAN can communicate with promiscuous ports in an associated
Primary VLAN only. They cannot communicate with other isolated ports in the same Isolated
VLAN, non-associated Primary VLAN promiscuous ports nor any community ports.
Table 138 PVLAN Graphic Key
LABEL
P-VLAN 100
C
HAPTER
DESCRIPTION
Primary private VLAN
GS3700/XGS3700 Series User's Guide
265
3 2

Private VLAN