HP Cisco Nexus 5000 Cisco Nexus 5000 Series Switch CLI Software Configuration - Page 134

Primary and Secondary VLANs in Private VLANs Information About Private VLANs promiscuous port in its primary VLAN. Hosts on community VLANs can communicate among themselves and with their associated promiscuous port but not with ports in other community VLANs. Figure 9: Private VLAN Domain Note You must first create the VLAN before you can convert it to a private VLAN, either primary or secondary. Primary and Secondary VLANs in Private VLANs A private VLAN domain has only one primary VLAN. Each port in a private VLAN domain is a member of the primary VLAN; the primary VLAN is the entire private VLAN domain. Secondary VLANs provide isolation between ports within the same private VLAN domain. The following two types are secondary VLANs within a primary VLAN: • Isolated VLANs-Ports within an isolated VLAN cannot communicate directly with each other at the Layer 2 level. • Community VLANs-Ports within a community VLAN can communicate with each other but cannot communicate with ports in other community VLANs or in any isolated VLANs at the Layer 2 level. Private VLAN Ports The three types of private VLAN ports are as follows: Cisco Nexus 5000 Series Switch CLI Software Configuration Guide 88 OL-16597-01