Patent ID: 9363207
Filing Date: 2016-06-07
CPC Classification: H04L

Claim Text:
1. A method comprising: obtaining at a virtual switch domain configured with a primary virtual local area network and a secondary virtual local area network, addresses of end hosts within said secondary virtual local area network, wherein the virtual switch domain comprises a network device comprising a virtual switch that is part of the distributed virtual switch; creating at the virtual switch domain, a private virtual local area network access list comprising said addresses of end hosts permitted to communicate on said secondary virtual local area network, wherein said private virtual local area network access list restricts communication on said secondary virtual local area network to said virtual switch domain; and applying said private virtual local area network access list to interfaces at the virtual switch domain connected to the end hosts permitted to communicate on said secondary virtual local area network to identify the end hosts within said secondary virtual local area network at the virtual switch domain; wherein the virtual switch domain is in communication with an upstream network device in communication with at least one other virtual switch domain comprising at least one other network device, the virtual switch domain and said at least one other virtual switch domain both configured with said primary virtual local area network, wherein said at least one other virtual switch domain is configured with a second secondary virtual local area network configured with a same virtual local area network identifier as said secondary virtual local area network and wherein communication between said secondary virtual local area network and said second secondary virtual local area network is restricted based on a check of said private virtual local area network access list when a packet is received at the virtual switch domain to provide private virtual local area network isolation across virtual switch domains.