How to configure a private VLAN

This video explains what a private VLAN is and how to configure it.

In this video, we will describe what a private VLAN is and how to configure it on a SmartFabric A private VLAN partitions a regular VLAN’s single, L2 broadcast domain into one primary VLAN domain and multiple secondary subdomains.

It provides L2 isolation between devices that are members of the same broadcast domain. A primary VLAN functions as a regular VLAN. Secondary VLANs are classified into isolated VLAN and community VLANs.

Devices that are connected to the promiscuous port in the primary VLAN can communicate with all the ports in the primary VLAN and secondary VLANs.

Devices that are connected to ports within an isolated VLAN can communicate only with the promiscuous port, but not with any other secondary host ports.

Devices that are connected to ports within a community VLAN can communicate with each other and with the promiscuous port as well, but not with any other secondary VLAN ports.

Let us now look at how to configure a private VLAN. This example shows you how to configure a primary VLAN, an isolated VLAN, and a community VLAN.

Let us first configure a primary VLAN, in this example, VLAN 10, and associate a promiscuous port to it. Next, let us configure an isolated VLAN, in this example, VLAN 20 and associate a secondary port to it.

Next, let us configure a community VLAN, in this example, VLAN 30 and associate a secondary port to it. Finally, let us associate the list of secondary VLANs, in our example, VLAN 20 and VLAN 30, to the primary VLAN, VLAN 10.

Before we finish, let us verify the private VLAN configuration. This completes the PVLAN configuration process. If you would like to see additional information on this feature, please refer to the SmartFabric OS10 User Guide at dell.com/support.