Vlan with no SVI vs private VLAN

[Mduref]

Hello,

I have a guest VLAN for wifi users. The users in this VLAN should not access any other VLAN, the only device plugged on this VLAN is the firewall with dhcp enabled (+AP_802.1q).

Currently, the guest VLAN doesn't have a network assigned to it (no SVI) and it's working fine, but I was wondering if it would be better to use a VLAN with SVI and port isolation instead... 

[Julio E. Moisa]

Hi,

You could use Private VLAN or Switchport Protect, below you will find a good article:

https://packetu.com/2012/10/23/comparing-pvlan-to-pvlan-edge/

Hope it is useful

:-)