As of May 31, 2023, we have updated our Code of Conduct.

Questions tagged [private-vlan]

For questions about or involving private VLAN. For instance, you need to split a running VLAN into sub domains or sub-VLANs inside a VLAN.

Filter by
Sorted by
Tagged with
0 votes
2 answers
68 views

Hide private IP address

DS has 7 VLANs and 7 DHCP pools respectively. There are 3 trunk links to 3 access layer switchs to share VLANs. Its VLAN interfaces and DHCP pools: ip dhcp pool vlan10 network 192.168.10.0 255.255....
chancuockhanh's user avatar
0 votes
1 answer
36 views

Private vlan split in two networks

Is it possible to split one private vlan (or isolated vlan) between two networks? so the "white" vlan from network 1 can only communicate with its peer in network 2?
Ethan bino's user avatar
1 vote
1 answer
383 views

Private VLAN: gateway and DHCP for isolated VLANs over multiple switches (Extreme)

I'm using extreme network switches and have some networks that would benefit from isolation. The idea is to create a private vlan with isolated vlans, that span over multiple switches. The vlans have ...
someonr's user avatar
  • 111
1 vote
1 answer
51 views

What is the appropriate VLAN configuration for this?

We have a group of clients connects to a Arista switch with DHCP enabled. And we want to setup an additional private VLAN so that those clients can communicate to each other through pre-defined static ...
feplooptest's user avatar
1 vote
0 answers
26 views

Personal VPN sub-network accessible through Work VPN? [closed]

I currently access my work network via Cisco VPN. At work, I have my own three computers and NAS on a personal dedicated router using my own DHCP. For several reasons, I do not want these computers to ...
Tom Foutz's user avatar
  • 111
0 votes
1 answer
1k views

Struggling with interVLAN routing + multiple VPNs + default routes on multi-layer switch

I have a fairly simply setup, using a PCEngines firewall running OPNSense and an EdgeCore ECS4620-28P L3 switch. The EdgeCore is doing InterVLAN routing and that works just fine, but I cannot get ...
BitShift's user avatar
  • 103
0 votes
2 answers
429 views

PVLAN on juniper- native isolated VLAN & trunk

I'm trying to use PVLAN to isolate devices (servers) on a L2 network from each other. However, these devices are currently sit on trunk ports, because they have VLAN-aware IPMI interfaces. My config ...
jimmystack's user avatar
1 vote
1 answer
92 views

is private Vlan concept an alternative for access-list configuration?

is private Vlan concept is introduced by cisco for alternative for access-list to segregate traffic among different Vlan and within same Vlan .
user avatar
2 votes
0 answers
48 views

Private VLANs implementation

So, I have campus LAN, implemented as many VLANs with InterVLAN routing, that spreads on tens of L2 switches and one L3 switch. Now, I have request that hosts on one VLAN don't see each other. But, ...
John's user avatar
  • 812
0 votes
2 answers
66 views

Private VLANs Same As VLANs!

The common VLANs provides a layer 2 speration flooding and broadcasting is limited to each virtual lans. Im wondering what is the purpose of the private VLANs also the secondary VLANs (isolated and ...
Anas Majzoob's user avatar
0 votes
3 answers
113 views

Do i need VLAN per customer when i want to give users (secure) access to specific customer sites

This question is a follow up on this question. We are currently working on the network design, nothing is implemented yet. Our network will exist out of our own (internal) network and lot of customer ...
CodeNinja's user avatar
  • 219
0 votes
0 answers
17 views

how do i save private ip space using NAT [duplicate]

im using VLSM to assign private ip address networks to my specific vlans. Unfortunately there is not enough space in my /24 mask even when segmented in order to accommodate my user requirements for ...
dude456's user avatar
1 vote
0 answers
661 views

802.1Q Tag mapping using Private VLANs on Cisco Nexus 3524

I'm struggeling with a VLAN mapping issue on a Nexus 3524 Switch. My setup: Downlink router<---Dot1Q 1901--->NX3524<---Dot1Q 493--->Uplink router I already figured out that basic 1:1 ...
Andreas Schaefer's user avatar
4 votes
0 answers
177 views

PVLANs/Port isolation in IPv6 networks

We're currently using port isolation to prevent communication between computers on the same vlan and use client isolation on our guest wifi. The reason for having this enabled is to prevent unwanted ...
ForJ9's user avatar
  • 161
1 vote
2 answers
177 views

Private Vlans - Promiscuous port [closed]

If I had a private vlan on my switch, can it communicate with a 'normal' vlan on that same switch ? Is it only between secondary private vlan that communication is restricted ? It seems to be the ...
user59345's user avatar
3 votes
3 answers
65 views

Correct term for networks created for virtual machines and containers?

What is the correct term for the type of network created for virtual machines and for containers. For illustration a Linux virtual host might have devices docker0 as 02:42:a6:79:a6:bc with address 172....
Tim's user avatar
  • 1,515
1 vote
1 answer
553 views

Securing VLANs for Wireless AP with multiple SSIDs

I'm deploying Wireless Access Points with two SSIDs: employee (VLAN 45) and guests (VLAN 46). I'm confused how I should configure the Ethernet port on the APs and switch. My preference would be to ...
SRobertJames's user avatar
0 votes
1 answer
2k views

Maximum no of Host's possible in private network on class wise? [duplicate]

my query is that what is the maximum no of host's are possible for Private network in class wise. i.e i want to know No of Private host's in CLASS A,B,C? how to calculate these no?
BalakrishnaVadlapatla's user avatar
1 vote
2 answers
4k views

Meraki Firewall & Switch VLAN Setup

I have a Meraki MX84 Firewall and a Meraki MS225-48FP switch. I have two VLAN's one is VLAN 1 (Default) the other is VLAN 50. Vlan 1 (Default) has a scope of 192.168.1.x and VLAN 50 has a scope of ...
THERAWJUAN's user avatar
-1 votes
2 answers
58 views

Can the data usage be Oriented by Consume of Demand?

Let's imagine that a LAN house, solve to charge financially your users, through of data usage consumption and not by time of use. It Is possible do control individually of assignment of data usage for ...
jonathasborges1's user avatar
6 votes
1 answer
7k views

What's use of Port Isolation vs traditional VLANs?

I've seen several switch products advertising port isolation feature as "way to limit ports communication without configuring VLANs" and it sounds quite... sketchy? If i understand it correctly port ...
Lapsio's user avatar
  • 221
3 votes
1 answer
3k views

Private VLAN on HP switch

I am totally new to vlan concept and I am trying to learn by configuring them on these 2 switches: HP-2530-24G and HP-1820-8G(where there is no CLI). I need to implement Private-Vlan on these switches ...
Shruthi's user avatar
  • 175
10 votes
2 answers
1k views

Can a switch that does NOT support VLAN capability be considered a managed switch if it has other features?

So the question is in the title. If a switch does not support Virtual Local Area Network capabilities can it still be considered a managed switch? What other features should it have to be considered ...
yoyo_fun's user avatar
  • 1,491
0 votes
2 answers
430 views

How can I set up a VLAN to be firewalled from our intranet? [closed]

I am being tasked with setting up about 15 PCs to be used as digital signage at my job. These PCs are not allowed to be connected to our internal network/intranet. We do have one Mac workstation that ...
Skate_and_Create's user avatar
0 votes
2 answers
433 views

Is a PVLAN the same as a one-port VLAN

Recently I came across the concept of a Private VLAN (https://en.wikipedia.org/wiki/Private_VLAN). However, I can't seem to see the difference between a PVLAN and a VLAN which is configured on one ...
Michael's user avatar
  • 225
1 vote
1 answer
642 views

Block private addresses for Egress traffic passing through an ASA firewall performing NAT translation

I am completing a lab and have been told I should ALWAYS block Egress traffic from private address ranges. The ASA performs NAT translation of private IPs to the public IP address assigned to the '...
ChrisCurrie's user avatar
1 vote
2 answers
7k views

How to assign multiple VLANS to a port?

I have a simple question about a network (I am new to this concept so please correct me if I am wrong). I have a simple network as shown (GNS3): The network have 3VLANS (VLAN10 = DesignTeam, VLAN30 ...
tranmaster's user avatar
1 vote
1 answer
602 views

No Private VLAN commands Cisco C3560 switch

I'm studying Private VLAN on C3560 Cisco Switch hardware. When i enter the (config-vlan)# It doesn't contain the private-vlan command in the list of available commands. I turned the VTP mode to ...
Federal Reserve's user avatar
1 vote
1 answer
2k views

Manage access point in a different subnet

I am trying to setup a separate private network for a rented office in our building. I think i have succeeded in setting up two private LAN networks using port based VLAN's (192.168.10.0/24 and 192....
Sisco's user avatar
  • 13
0 votes
1 answer
259 views

Bonjour defeating wireless isolation?

I have two MacBook Pros and a Cisco RV110W wireless router. I have created a VLAN with all ports untagged and I linked this VLAN to a Wi-Fi with the option "Wireless Isolation with SSID" on. From ...
Edenshaw's user avatar
  • 101
4 votes
5 answers
2k views

Are there any security advantages to activating VLAN tagging?

I understand the concepts of generating a VLAN. However, on a small, closed, sophisticated network, are there any security advantages to activating VLAN tagging?
mdpc's user avatar
  • 925
1 vote
1 answer
312 views

For how much period does the NAT table entry stays there even after connection is closed?

Yesterday, I was reading about the NAT then, during that time I endup with above doubt, I am thinking that if some application from private network makes call to outside world i.e. public network ...
0x47-sci-tech's user avatar
2 votes
1 answer
423 views

How to achieve Private VLAN (PVLAN) isolation without PVLAN support on switches

I'm looking for some wired client isolation on our public IPv4 VLAN. Since we have a /23 block, isolation is a kind of feature that's really useful. But we don't have switches capable of PVLAN. To ...
Vinícius Ferrão's user avatar
2 votes
2 answers
78 views

private-vlan pimary vlan port not set to promiscuous?

What is the behavior of a port in a private-vlan pimary vlan that isn't set to promiscuous?
skrap3e's user avatar
  • 443
1 vote
0 answers
157 views

Create private sub(?)-network with AdvancedTomato router and Apple Time Capsule … [closed]

In the next time, I’m connecting to the internet via my neighbor’s router/connection (VDSL) and I want to create a secure/private sub(?)-network between my MacBook, TimeCapsule and the neighbor’s ...
fooness's user avatar
  • 11
1 vote
2 answers
1k views

Configuring PVLANs across 3 switches

We are about to implement PVLANs into our environment however I had a couple of questions for anyone who has production experience with them. The network will be set up as follows: Hosts Hosts |...
Kvothe's user avatar
  • 57
1 vote
0 answers
58 views

Mirroring private vlan on catalyst switches

I currently have a catalyst switch configured with private VLANs and would like to mirror that traffic to an external system. I have tried creating a monitor session for the VLANs involved but that ...
xeet's user avatar
  • 173
2 votes
1 answer
349 views

Virtual Machines on a seprate vlan [closed]

My team has 100 developers. They each have a computer and on that computer, they have two nics facing our router. WiFi and their virtual machine (VMWare nic). I would like to have a network inside ...
Cripto's user avatar
  • 121
3 votes
1 answer
27 views

Limiting community member communication in PVLAN's

Is there a way to limit communication between community members in a PVLAN? Ex. Service provider ABC has 1000 clients, the clients with more than one VM to their name have their own community, ...
A L's user avatar
  • 3,310
1 vote
1 answer
103 views

Addressing guest hosts

Suppose one wishes to provide guests with access to the Internet (and only the Internet) over one's network. For obvious reasons, switch ports will be assigned to a private VLAN created specifically ...
eggyal's user avatar
  • 465
6 votes
1 answer
3k views

Juniper Private VLAN isolated port on a trunk

I'm trying to grasp the private VLAN configuration on Juniper EX switches. As I understand it right now: Access ports in the primary VLAN (VLAN with no-local-switching configured) are implicitly ...
Sebastian Wiesinger's user avatar
3 votes
1 answer
2k views

Private vLAN useful to isolate multicast sources?

On a Cisco 3750G switch I have a number (30-ish) of video processors in a vLAN providing multicast streams to clients via a router. Because all of the machines are in the same vLAN they see each ...
MERM's user avatar
  • 139
4 votes
1 answer
2k views

Private VLAN in transparent mode

Why do we have to set up the switch in transparent mode when dealing with private VLANs?
Trojan's user avatar
  • 1,398
5 votes
4 answers
3k views

Single client per VLAN in /24 network

I have a single /24 IP network. I want to make a VLAN (or something) and distribute a single IP and gateway per client. Each client should not be able to talk to each other. What is the best way to ...
Santu Roy's user avatar
3 votes
1 answer
2k views

Isolated VLAN members on a private VLAN (Cisco)

I have been wondering for a while about this. On Cisco switches you can configure a VLAN and nest private community and private isolated VLANs into it. You can also configure promiscuous ports that ...
Alex's user avatar
  • 837
8 votes
1 answer
2k views

Private-vlan configuration - connectivity issue

I've an issue leading with Private Vlans. I've fiber modem and they can't reach the DHCP/TFTP to be provision. I suspect from the configuration of Private VLANs. Can you review them ? My doubts are ...
cgasp's user avatar
  • 2,018