832 | Private VLANsw w w . d e l l . c o m | s u p p o r t . d e l l . c o m There are three types of ports in PVLAN:• Host Ports—these ports are the ones that Private VLAN aims to isolate. They are connected toend-stations.• Promiscuous Ports—these ports are members of the primary VLAN, and function as gateways to theprimary and secondary VLANs.• Trunk Ports—trunk ports carry tagged traffic between switches. They have promiscuous and trunkports as members.Figure 39-2. PVLAN: Primary and Secondary VLANsImportant Points to Remember• Even if secondary VLANs are operationally down, if the primary VLAN is operationally up, Layer 3traffic is still be transmitted across the secondary VLANs.• PVLAN ports cannot be added to regular VLANs. Conversely, regular VLAN ports cannot be added toPVLANs.• If a promiscuous or host port is untagged in a VLAN, and it receives a tagged packet in the sameVLAN, the packet will NOT be dropped.• A primary VLAN and each of its secondary VLANs decrement the available number of VLAN IDs inthe switch.Configure Private VLANsConfiguring Private VLANs is a 3-step process:1. Configure PVLAN Ports2. Place PVLAN Ports in a Secondary VLAN3. Place the Secondary VLANs in a Primary VLANNetworkServerPromiscuousPortTrunk PortHost PortHost PortPrimary VLANCommunityVLANIsolatedVLAN
