A primary PVLAN is created on a vDSwitch, and secondary PVLANs are associated with the primary PVLAN. There are three types of secondary PVLANs: Promiscuous, Community, and Isolated:
- The virtual machine connections in a Promiscuous PVLAN can communicate with all of the virtual machine connections in the same primary PVLAN. When a primary PVLAN is created, a Promiscuous PVLAN is created with the same PVLAN ID as the primary PVLAN.
- Virtual machine connections in a Community PVLAN can communicate with other virtual machine connections in the same Community PVLAN and virtual machine connections in the Promiscuous PVLAN. Multiple Community PVLANs can be associated with a single primary PVLAN.
- The virtual machine connections in an Isolated PVLAN can only communicate with the virtual machine connections in the Promiscuous PVLAN. Only one Isolated PVLAN can exist per primary PVLAN.
Private VLANs are created by editing the settings of a vDSwitch, as follows:
Editing a private VLAN
Once the PVLAN has been configured on the vDSwitch, a virtual machine network PortGroup is created with the PVLAN type and ID assigned, as follows:
Configuring a private VLAN on a vDS portgroup