Splits one primary VLAN into secondary VLANs, which can be isolated, community or promiscuous, so that devices sharing a subnet are kept apart at layer 2. vSphere offers it on distributed switches, not standard ones.
Also called PVLAN.
Read more: Broadcom TechDocs
In the Ultra Transcenders books
Each book explains Private VLAN in context, with comparison tables and the common traps.
Terms in this definition
- VLAN
Layer 2 broadcast domain tagged using 802.1Q. In VCF they carry TEP, vSAN, vMotion and management traffic, and NSX can back segments with them.
- Subnet
A segment of a VNet's address space from which resources receive private IPs. Azure holds back five addresses per subnet (the first four and the last), leaving 251 usable in a /24 and three in a /29, the smallest IPv4 subnet.
- L2
Layer 2 of the OSI model, the data link layer of frames, VLANs and MACs. An NSX segment is one broadcast domain at this layer.
- vSphere
VMware's platform for virtualisation, made up of vCenter and ESX hosts, supplying compute for VCF clusters.
- Standard deployment type
A Foundry deployment type billed per token that keeps processing of prompts and responses inside the Azure geography of the resource, meeting data residency needs at lower volumes.