Safari Books Online is a digital library providing on-demand subscription access to thousands of learning resources.
This section covers configuring private VLANs (PVLAN), configuring PVLAN trunks, verifying PVLANs, and configuring protected ports.
A problem can potentially exist when an Internet service provider (ISP) has many devices from different customers on a single demilitarized zone (DMZ) segment or VLAN—these devices are not isolated from each other. Some switches can implement PVLANs, which keep some switch ports shared and some isolated, even though all ports are in the same VLAN. This isolation eliminates the need for a separate VLAN and IP subnet per customer.