Private Vlan

1. Welcome to my Networking Channel
Please subscribe to my channel
SELVAJEGAN

2. Private Vlan

3. VLAN and private vlan
 Vlan is logically segmenting a switch into smaller broadcast domains
 Private vlan is used to restrict communication within a vlan
 A private VLAN partitions the Layer 2 broadcast domain of a VLAN into
subdomains, allowing you to isolate the ports on the switch from each other

4. Why Private Vlan
 Assume the scenario there are 100 servers in an organization
 Servers should not talk to each other
 But all the servers should be able to access the internet

6. Private Vlan Classification
 Secondary Vlan’s
isolated Vlan’s
Community Vlan’s
Primary Vlan

7. Community Vlan’s
 Ports within the same community vlan can reach each other
 But not with any other community or isolated vlan
 It can reach the primary vlan that is router

8. Isolated Vlan’s
 Switch ports associated with an isolated vlan can reach the primary vlan
 But not with any other secondary vlan
 Hosts associated with an isolated vlan cannot reach each other

9. Primary Vlan
Primary Vlan is nothing but a router
Ports connected to the primary vlan called promiscuous ports
Ports connected to the secondary vlan called host ports

10. Configuration
 Private Vlan Conf
================
 Vlan 101
Private-vlan community
 Vlan 102
Private-vlan isolated
Vlan 100
Private-vlan primary
Private-vlan association 101,102

11.  Interface range gi0/2 - 3
Switchport private-vlan host
Switchport private-vlan host-association 101 100
 Interface range gi0/4 - 5
Switchport private-vlan host
Switchport private-vlan host-association 102 100
Interface gi0/1
Switchport mode private-vlan promiscuous
Switchport private-vlan mapping 100 101,102
Configuration