Configuring VLANs 565
• If static MAC addresses are added for the host port, the same static MAC 
address entry must be added to the associated primary VLAN. This does 
not need to be replicated for dynamic MAC addresses.
• A private VLAN cannot be enabled on a management VLAN.
• A private VLAN cannot be enabled on the default VLAN.
• VLAN routing can be enabled on private VLANs. It is not very useful to 
enable routing on secondary VLANs, as the access to them is restricted. 
However, primary VLANs can be enabled for routing.
• It is recommended that the private VLAN IDs be removed from the trunk 
ports connected to devices that do not participate in the private VLAN 
traffic.
Private VLAN Configuration Example
See "Configuring a Private VLAN" on page 615.
Additional VLAN Features
The PowerConnect 8000/8100-series switches also support the following 
VLANs and VLAN-related features:
• VLAN routing interfaces — See "Configuring Routing Interfaces" on 
page 855.
• Guest VLAN — See "Configuring Port and System Security" on page 469.