Chapter 12 Configuring Private Vlan; Types Of Private Vlans And Private-Vlan Ports - Cisco ME 3400G-2CS - Ethernet Access Switch Software Configuration Manual

Ethernet access switch

Hide thumbs Also See for ME 3400G-2CS - Ethernet Access Switch:

Table of Contents

Understanding Private VLANs

Private VLANs partition a regular VLAN domain into subdomains. A subdomain is represented by a pair

of VLANs: a primary VLAN and a secondary VLAN. A private VLAN can have multiple VLAN pairs,

one pair for each subdomain. All VLAN pairs in a private VLAN share the same primary VLAN. The

secondary VLAN ID differentiates one subdomain from another. See

Figure 12-1 Private-VLAN Domain

community VLAN

There are two types of secondary VLANs:

Private VLANs provide Layer 2 isolation between ports within the same private VLAN. Private-VLAN

ports are access ports that are one of these types:

Cisco ME 3400 Ethernet Access Switch Software Configuration Guide

Isolated VLANs—Ports within an isolated VLAN cannot communicate with each other at the

Layer 2 level.

Community VLANs—Ports within a community VLAN can communicate with each other but

cannot communicate with ports in other communities at the Layer 2 level. A community VLAN can

include no more than eight user network interfaces (UNIs).

Promiscuous—A promiscuous port belongs to the primary VLAN and can communicate with all

interfaces, including the community and isolated host ports that belong to the secondary VLANs

associated with the primary VLAN.

Promiscuous ports must be network node interfaces (NNIs). UNIs cannot be configured as

promiscuous ports.

isolated VLAN

Configuring Private VLANs

Show Quick Links

Table of Contents

Troubleshooting