32.1 Private VLAN Overview
Use private VLAN if you want you to block traffic between ports in the same VLAN. Community and
Isolated VLANs are secondary private VLANs that must be associated with a Primary private
VLAN.
• Primary: Ports in a Primary VLAN are promiscuous and they can communicate with all
promiscuous ports in the same primary VLAN, and all ports in associated community and isolated
VLANs. They cannot communicate with ports in different primary VLANs.
• Community: Ports in a Community VLAN can communicate with promiscuous ports in an
associated Primary VLAN and other community ports in the same Community VLAN. They
cannot communicate with ports in Isolated VLANs, non-associated Primary VLAN promiscuous
ports nor community ports in different Community VLANs.
• Isolated: Ports in an Isolated VLAN can communicate with promiscuous ports in an associated
Primary VLAN only. They cannot communicate with other isolated ports in the same Isolated
VLAN, non-associated Primary VLAN promiscuous ports nor any community ports.
Figure 183 Private VLAN Overview
C
HAPTER
XS1920 Series User's Guide
260
3 2
Private VLAN