MicroNugget: Private VLANs

In this video, Keith Barker covers private VLANs (virtual local area networks). He’ll walk through the process of gaining entry through a universal access point and then how traffic is separated into isolated or community VLANs. A key part of this video is understanding various port types, including promiscuous, isolated, and community ports.

Private VLANs allow you to control what traffic is allowed to be seen between two different ports on the same Cisco switch. Creating an effective structure here gives sysadmins quite a bit of influence over what users can access. Keith explains the difference between primary and secondary VLANs and how they interact, which includes an understanding of the variations between isolated and community VLANs. Traffic enters and exits the switch through a universal access point known as a promiscuous port, which is often the default gateway. Two other port types are isolated and community, each of which has unique capabilities that work together to create a private VLAN.

Start learning with CBT Nuggets:

[jgl]

holy guacamole... i´ve never seen this level of perfection, the clearest sound, concise and concrete video and the best ilustration!

[ВладиславГнип-дт]

The only 1 man on youtube, who actually explained how this mechanism of pvlans works! Ty a lot!!

[lukeb]

i enjoyed how much you loved talking about private-vlans you almost couldn't contain your joy at the end there ! 10/10

[theMaschna]

Thanks a lot for these MicroNuggets. Makes my learning and labbing so much better and easier. Just watch micronugget and lab it out!! Don't have to read 300 pages or watch 30 min video about a topic!! I really encourage you guys to do more of such videos, these are golden. Thanks again.

[myunusansari]

no words to thank. i am complete new to topic and at age 55+ i can understand. you made it easy through your nice presentation. be blessed.

[BryanMPhx]

Bryan McGann thinks that this Private VLAN video is excellent. This is great training for the Cisco SWITCH exam.

[ricardoconcepcion]

Great video. I can say now that I know about how private vlan works. With a simple analogy you explain a hard concept very wel. Thanks.

[karimbakhshamiry]

The nicest explanation I got about private vlans!

[ismatatia]

This is wonderfully described. Just perfect. Thanks you very much Keith. :)

[kennethataro]

You just demystified PVLAN. thanks a bunch

[alfonsotrocciola]

I saw some videos in a ccnp security training but really this explaination is still kicking! Thanks a LOT!!!

[LalGebi]

Great Video.. I have some queries
1) what about communicating between two different Primary VLAN having secondary VLAN?
2) Does inter VLAN routing will work as it is as before or it will be affected by PVLAN security?
3)What in case we have access between two devices in terms of interVLAN routing but no access in terms of PVLAN security. What would be effective access?

[aksel]

great explanantion, hat's off mr keith

[ahmedabduljabar]

Keith, that was amazing .. this was more then a good review before i start reading the Private VLANs at CCIE Level ..thanks a lot :)

[lynxlive]

just a question when typing the description, [! explanation] is that a way to do hostnames or is it meant just as a description for the video. maybe a note like in programing [//explanation]. was curious

[joshharding]

Thanks Keith, perfectly explained and makes sense. +1 subscription from me

[mrpeterdrake]

Wow, great analogy, explanation and full config in under 10 minutes! Are you going to cover VACL's?

[shihab]

I have done and ensured all this thing.but my vlan type is not changing it is showing type as normal, i have made it to community and isolated but not working

[Alestrix]

Are the VLANs 200, 300, 400, 500 visible outside the switch, i.e. past the uplink port, or will the Ethernet frames show up as tagged with ID 100?

[naumanrasheed]

but even the creation of vlan access ports also does the same job right?