215
{ GigabitEthernet 1/0/1 is removed from VLAN 10.
Related commands
• port private-vlan host
• port private-vlan promiscuous
• port private-vlan trunk promiscuous
• private-vlan (VLAN view)
• private-vlan isolated
• private-vlan primary
private-vlan (VLAN interface view)
Use private-vlan secondary to enable Layer 3 communication between secondary VLANs that are
associated with a primary VLAN.
Use undo private-vlan to cancel the Layer 3 communication configuration for secondary VLANs
that are associated with a primary VLAN.
Syntax
private-vlan secondary vlan-id-list
undo private-vlan [ secondary vlan-id-list ]
Default
Secondary VLANs are isolated at Layer 3.
Views
VLAN interface view
Predefined user roles
network-admin
Parameters
vlan-id-list: Specifies a space-separated list of up to 10 secondary VLAN items. Each item specifies a
secondary VLAN ID or a range of secondary VLAN IDs in the form of vlan-id1 to vlan-id2. The value
range for secondary VLAN IDs is 1 to 4094. The value for the vlan-id2 argument must be equal to or
greater than the value for the vlan-id1 argument.
Usage guidelines
This command takes effect only when the following conditions exist:
• This command is executed in primary VLAN interface view.
• Secondary VLANs are associated with the primary VLAN.
• No VLAN interfaces are created for secondary VLANs.
• An IP address is assigned to the primary VLAN interface.
• Local proxy ARP or ND is enabled on the primary VLAN interface.
You can create VLAN interfaces for secondary VLANs that are not enabled with Layer 3
communication. If secondary VLANs are enabled with Layer 3 communication, do not create VLAN
interfaces for them.
When you execute this command in the same primary VLAN interface view multiple times, all the
specified secondary VLANs are interoperable at Layer 3.
When you execute the undo private-vlan command, follow these guidelines:
To Next Page
Loading...
Need help?
General