How to Configure a Private VLAN (PVLAN) and Port Group on your vSphere Distributed Switch (vDS) in VMware vSphere ESXi 5.x

Types of PVLANS

• Promiscuous : Primary PVLAN - Default PVLAN and can communicate with any port in the VLAN.
• Isolated : Secondary PVLAN - Only able to communicate with the promiscuous port.
• Community : Secondary PVLAN - Able to communicate with other ports on the VLAN and the promiscuous port.

1. Set the physical switch port to trunk and any PVLANs added on your vDS need to be added to the trunk on the physical switch port.
2. In the vSphere Client, go to the home screen and click on Networking
   
3. Right click on the distributed switch you want to configure a PVLAN and then click on Edit Settings
   
4. Click on the Private VLAN tab
   
5. Under Primary private VLAN ID, click on [Enter a private VLAN ID here] to input your primary PVLAN ID. NOTE: This will be your promiscuous PVLAN by default
   
6. To add secondary PVLANS, click on [Enter a private VLAN ID here] under Secondary private VLAN ID and input a PVLAN ID
   
7. From the Type dropdown, choose whether you want an Isolated or Community PVLAN
   
8. Click on the OK button
9. Right click on your distributed switch and click on New Port Group
   
10. Input your name for your port group
    
11. From the VLAN type dropdown, choose Private VLAN
    
12. Choose the Primary VLAN you want to use for this port group and then click on the Next button
    
13. Review all of the settings and click on the Finish button