ZyXEL Communications XS3800-28, User Manual, Page: 353 / 789

Chapter 48 Private VLAN
XS3800-28 User’s Guide
353
C
HAPTER
48
Private VLAN
48.1 Private VLAN Overview
Use private VLAN if you want you to block traffic between ports in the same VLAN. Community and
Isolated VLANs are secondary private VLANs that must be associated with a Primary private VLAN.
• Primary : Ports in a Primary VLAN are promiscuous and they can communicate with all promiscuous
ports in the same primary VLAN, and all ports in associated community and isolated VLANs. They
cannot communicate with ports in different primary VLANs.
• Community : Ports in a Community VLAN can communicate with promiscuous ports in an associated
Primary VLAN and other community ports in the same Community VLAN. They cannot communicate
with ports in Isolated VLANs, non-associated Primary VLAN promiscuous ports nor community ports in
different Community VLANs.
• Isolated : Ports in an Isolated VLAN can communicate with promiscuous ports in an associated Primary
VLAN only. They cannot communicate with other isolated ports in the same Isolated VLAN, non-
associated Primary VLAN promiscuous ports nor any community ports.
Tagged Private VLANs can span switches but trunking ports must be VLAN-trunking ports – see
Table 168 PVLAN Graphic Key
LABEL DESCRIPTION
P-VLAN 100 Primary private VLAN
C-VLAN 101 Community private VLAN
I-VLAN 102 Isolated private VLAN