Zyxel XS3900-48F [249/332] Private vlan overview

XS3900-48F User’s Guide 249

CHAPTER 31

Private VLAN

31.1 Private VLAN Overview

Use private VLAN if you want you to block traffic between ports in the same VLAN. Community and

Isolated VLANs are secondary private VLANs that must be associated with a Primary private

VLAN.

• Primary: Ports in a Primary VLAN are promiscuous and they can communicate with all

promiscuous ports in the same primary VLAN, and all ports in associated community and isolated

VLANs. They cannot communicate with ports in different primary VLANs.

• Community: Ports in a Community VLAN can communicate with promiscuous ports in an

associated Primary VLAN and other community ports in the same Community VLAN. They

cannot communicate with ports in Isolated VLANs, non-associated Primary VLAN promiscuous

ports nor community ports in different Community VLANs.

• Isolated: Ports in an Isolated VLAN can communicate with promiscuous ports in an associated

Primary VLAN only. They cannot communicate with other isolated ports in the same Isolated

VLAN, non-associated Primary VLAN promiscuous ports nor any community ports.

Table 113 PVLAN Graphic Key

LABEL DESCRIPTION

P-VLAN 100 Primary private VLAN