Figure4-2. There are two private VLAN groups
There are two private VLAN groups in Figure4-2. Group 1 includes port 1-3 and port 11; Group 2
includes port 5-7 and port 12. In group 1, port 1 is separated; port 2 and 3 are shared and form a
shared port group; port 11 is promiscuous. In group 2, port 5 is separated, port 6 and 7 are
shared and form a shared port group; port 12 is promiscuous. According to functionality for
different types of ports, here is the communication style for the two VLAN groups:
(Separated port, group 1) user 1 can only communicate with server 1, not with user
2-3;
(Shared ports, group 1) user 2-3 can communicate with server 1, and they can also
communicate with each other, but not with user 1;
(Separated port, group 2) user 4 can only communicate with server 2, not with user
5-6;
(Shared ports, group 2) user 5-6 can communicate with server 2, and they can also
communicate with each other, but not with user 4;
(Across VLAN groups) Communication between devices in group 1 and those in group
2 should go through Layer 3 transmission.
2. Nrange of private VLAN
A private VLAN group is composed of multiple contiguous VLANs, so users need to select
