User's Manual

Table Of Contents
208
Users Manual of CS-6306R
Chapter 18. Private VLAN Settings
Private VLAN Settings 18.1
Overview of Private VLAN 18.2
Private VLAN has settled the VLAN application problems facing ISPs: If ISP provides each user with a VLAN,
the support by each device of 4094 VLANs will restrict the total of ISP-supported users.
Private VLAN Type and Port Type in Private VLAN 18.3
Private VLAN subdivides the L2 broadcast domain of a VLAN into multiple sub-domains, each of which
consists of a private VLAN pair: a primary VLAN and a secondary VLAN. One private VLAN domain may have
multiple private VLAN pairs and each private VLAN pair stands for a sub-domain. There is only one primary
VLAN in a private VLAN domain and all private VLAN pairs share the same primary VLAN. The IDs of
secondary VLANs in each sub-domain differ with each other.
18.3.1 Having One Primary VLAN Type
Primary VLAN: It is relevant to a promiscuous port and only one primary VLAN exists in the private VLAN.
Each port in the primary VLAN is a member in the primary VLAN.
18.3.2 Having Two Secondary VLAN Types
Isolated VLAN: No layer-2 communication can be conducted between two ports in the same isolated
VLAN. Also, there is only one isolated VLAN in a private VLAN. The isolated VLAN must be related with
the primary VLAN.
Community VLAN: Layer-2 communication can be conducted between two ports in the same VLAN, but
they have no communication with the ports in another community VLAN. One private VLAN may contain
multiple community VLANs. The community VLAN must be related with the primary VLAN.
18.3.3 Port Types Under the Private VLAN Port
Promiscuous port: it belongs to the primary VLAN. It can communicate with all other ports, including the
isolated port and community port of a secondary VLAN in the same private VLAN.
Isolated port: It is the host port in the isolated VLAN. In the same private VLAN, the isolated port is totally
L2 isolated from other ports except the promiscuous port, so the flows received from the isolated port can
only be forwarded to the promiscuous port.
Community port: It is the host port in the community VLAN. In a private VLAN, the community ports of the
same community VLAN can conduct L2 communication each other or with the promiscuous port, but not
with the community ports of other VLANs and the isolated ports in the isolated VLANs.