a vlan is a network is a subnet is a broadcast domain... so what is a private vlan... a private vlan is a vlan within a vlan... why? to segregate traffic within vlans yet further... this comes in handy for isp's who have customers in the same subnet, but need further segmentation for security... the vlans are in the same subnet, they simply communicate in different vlans within the subnet...
types- promiscuous, (tramp) a port will send and receive to and from any other port on the vlan
isolated, only allowed to communicate with tramps, and are stubs
community, can communicate between themselves and tramps
for a great discussion see petr laphukov below
http://blog.ine.com/2008/01/31/understanding-private-vlans/
and more here from the horse's mouth...
http://www.cisco.com/en/US/tech/tk389/tk814/tk840/tsd_technology_support_sub-protocol_home.html
No comments:
Post a Comment