user manual

private VLAN can have multiple VLAN pairs, one pair for each subdomain. All VLAN pairs in a private
VLAN share the same primary VLAN. The secondary VLAN ID differentiates one subdomain from another.
Figure 6: Private VLAN Domain
Related Topics
Configuring and Associating VLANs in a Private VLAN, on page 93
Example: Configuring a Primary VLAN, Isolated VLAN, and a Community of VLANs, on page 102
Secondary VLANs
There are two types of secondary VLANs:
• Isolated VLANs—Ports within an isolated VLAN cannot communicate with each other at the Layer 2
level.
• Community VLANs—Ports within a community VLAN can communicate with each other but cannot
communicate with ports in other communities at the Layer 2 level.
Private VLANs Ports
Private VLANs provide Layer 2 isolation between ports within the same private VLAN. Private VLAN ports
are access ports that are one of these types:
Catalyst 2960-XR Switch VLAN Configuration Guide, Cisco IOS Release 15.0(2)EX1
88 OL-29440-01
Configuring Private VLANs
Secondary VLANs