Configuring VLANs Using Private VLANs
OmniSwitch AOS Release 8 Network Configuration Guide December 2017 page 4-24
Sample PVLAN Use Case
PVLAN Spanning across Multiple Systems
The following diagram shows how using a PVLAN configuration allows the traffic to be segmented at the
Layer 2 level, thus limiting the broadcast domain and extending it across multiple switches.
The individual switches are separately configured with the PVLAN setup. IP interfaces are configured on
the Primary VLAN, and the hosts in both the Isolated and Community VLAN can share the IP addresses
from the same subnet but still remain isolated.
In this use case example, there are two Primary VLANs (100, 50) spanning across multiple OmniSwitch
systems:
Primary VLAN: 100 (IP subnet: 10.10.100.x)
• Community VLAN: 115
• Isolated VLAN: 120
Primary VLAN: 50 (IP subnet: 10.10.50.x)
• Isolated VLAN: 55
All the isolated, community, and promiscuous ports can be untagged or tagged. Since the PVLAN domain
spans across multiple switches, an Inter-Switch Link (ISL) port is configured for each Primary VLAN on
each switch to connect and carry traffic forwarded on the Primary VLANs.
The PVLAN traffic flow in this scenario is as follows:
Community VLAN
115, 100
Isolated VLAN
55, 50
Isolated VLAN
120, 100
Community VLAN
115, 100
Isolated VLAN
120, 100
1
2
3
4
1
2
3
VLAN
100
VLAN 50
P
VLAN 50
VLAN
100
OmniSwitch-1
OmniSwitch-3
OmniSwitch-2
L
L
L
L
P
VLAN 50
P
VLAN 100
L
Inter-Switch Link Port
P
Promiscuous Port
1 2
Community VLAN Ports
3 4
Isolated VLAN Ports
To Next Page
Loading...
