This object is a bitmask (PortList) identifying which ports are operationally active as isolated host ports for a given private VLAN mapping, where these host ports can only communicate with the promiscuous port, not with each other. An administrator checks this to confirm which access ports are actually isolated under the private VLAN configuration, such as ports serving hotel guest rooms that must not see each other's traffic. For example, vlanPrivateMapSecondaryOperPorts showing ports 1 through 20 set confirms those twenty access ports are operationally isolated from one another under this private VLAN.