Describe and differentiate Network Segmentation for CVM-CVM/CVM-Hypervisor/CVM-Intranet
Default untagged VLAN for CVM and AHV host
The setup shown here well for situations where the switch administrator can set the CVM and AHV VLAN to untagged.
Tagged VLAN for CVM and AHV host
If you do not want to send untagged traffic to the AHV host and CVM, or if security policy doesn’t allow this configuration, you can add a VLAN tag to the host and the CVM.
More information about Network Segmentation for the CVM’s here.
And here is a nice explanation on the different VLAN types.