Private VLANs (PVLANs) divide a typical VLAN into sub-VLANs while maintaining the IP subnet and Layer 3 configuration. Each sub-VLAN can become its own isolation boundary based on the port type.
Hyper-V has the capability of supporting the following Private VLAN port types:
Promiscuous: This type of port is permitted to communicate to any other port within a PVLAN including Isolated and Community
Isolated: This type of port is only permitted to communicate to Promiscuous ports within a PVLAN and cannot communicate other Isolated ports or Community ports
Community: This type of port is permitted to communicate with any other Promiscuous or Community port within the PVLAN
PVLANs separate traffic at Layer 2. The following diagram describes the port types:
