Dell N1100-ON, Reference Manual

Page: 787 / 2332

Layer 2 Switching Commands
787
Private VLAN Commands
The Dell EMC Networking Private VLAN feature separates a regular VLAN
domain into two or more subdomains. Each subdomain is defined
(represented) by a primary VLAN and a secondary VLAN. The primary VLAN
ID is the same for all subdomains that belong to a private VLAN. The
secondary VLAN ID differentiates subdomains from each another and
provides Layer 2 isolation between ports of the same private VLAN. There are
the following types of VLANs within a private VLAN:
• Primary VLAN
Forwards the traffic from the promiscuous ports to isolated ports,
community ports and other promiscuous ports in the same private VLAN.
Only one primary VLAN can be configured per private VLAN. All ports
within a private VLAN share the same primary VLAN.
• Isolated VLAN
Is a secondary VLAN. It carries traffic from isolated ports to promiscuous
ports. Only one isolated VLAN can be configured per private VLAN.
• Community VLAN
Is a secondary VLAN. It forwards traffic between ports which belong to the
same community and to the promiscuous ports. There can be multiple
community VLANs per private VLAN.
Three types of port designations exist within a private VLAN:
• Promiscuous port
Belongs to a primary VLAN and can communicate with all interfaces in
the private VLAN, including other promiscuous ports, community ports
and isolated ports. An endpoint connected to a promiscuous port is
allowed to communicate with any endpoint within the private VLAN.
Multiple promiscuous ports can be defined for a single private VLAN
domain.
• Host port
Belongs to a secondary VLAN and depending upon the type of secondary
VLAN can either communicate with other ports in the same community
(if the secondary VLAN is the community VLAN) and with the