Please note that the content of this book primarily consists of articles available from Wikipedia or other free sources online. A private VLAN is technique in computer networking where a VLAN contains switch ports that are restricted, such that they can only communicate with a given "uplink". The restricted ports are called "private ports". Each private VLAN typically contains many private ports, and a sing ...Full description
Please note that the content of this book primarily consists of articles available from Wikipedia or other free sources online. A private VLAN is technique in computer networking where a VLAN contains switch ports that are restricted, such that they can only communicate with a given "uplink". The restricted ports are called "private ports". Each private VLAN typically contains many private ports, and a single uplink. The uplink will typically be a port (or link aggregation group) connected to a router, firewall, server, provider network, or similar central resource. The switch forwards all frames received on a private port out the uplink port, regardless of VLAN ID or destination MAC address. Frames received on an uplink port are forwarded in the normal way (i.e., to the port hosting the destination MAC address, or to all VLAN ports for unknown destinations or broadcast frames). "Peer-to-peer" traffic is blocked. Note that while private VLANs provide isolation at the data link layer, communication at higher layers may still be possible.