privateVLAN can have multiple VLAN pairs, one pair for each subdomain. All VLAN pairs in a private
VLANshare the same primary VLAN. The secondary VLAN ID differentiates one subdomain from another.
Figure 6: Private VLAN Domain
Related Topics
Configuringand Associating VLANs in a Private VLAN, onpage 93
Example:Configuring a Primary VLAN, Isolated VLAN, and a Community of VLANs, onpage 102
Secondary VLANs
Thereare two typesof secondary VLANs:
•IsolatedVLANs—Ports within an isolated VLAN cannot communicate with each other at the Layer 2
level.
•CommunityVLANs—Ports within acommunity VLAN can communicate with each other but cannot
communicatewith ports inother communities at the Layer 2 level.
Private VLANs Ports
PrivateVLANs provide Layer 2 isolation between ports within the same private VLAN. Private VLAN ports
areaccess ports that are one of these types:
Catalyst 2960-XR Switch VLAN Configuration Guide, Cisco IOS Release 15.0(2)EX1
88 OL-29440-01
Configuring Private VLANs
Secondary VLANs