178
Step Command Remarks
5. Create one or multiple
secondary VLANs.
vlan
{ vlan-id1 [
to
vlan-id2 ] |
all
} N/A
6. Return to system view.
quit
N/A
7. Enter VLAN view of the
primary VLAN.
vlan
vlan-id
N/A
8. Associate the primary
VLAN with the secondary
VLANs.
private-vlan secondary
vlan-id-list
By default, a primary VLAN is not
associated with any secondary
VLANs.
9. Return to system view.
quit
N/A
10. Enter interface view of the
uplink port.
interface
interface-type
interface-number
N/A
11. Configure the uplink port
as a promiscuous or trunk
promiscuous port of the
specified VLANs.
• Configure the uplink port as a
promiscuous port of the
specified VLAN:
port private-vlan vlan-id
promiscuous
• Configure the uplink port as a
trunk promiscuous port of the
specified VLANs:
port private-vlan vlan-id-list
trunk promiscuous
By default, a port is not a
promiscuous or trunk
promiscuous port of any VLANs.
12. Return to system view.
quit
N/A
13. Enter interface view of the
downlink port.
interface
interface-type
interface-number
N/A
14. Assign the downlink port to
secondary VLANs.
a Set the link type of the port:
port link-type { access |
hybrid | trunk }
b Assign the access port to the
specified VLAN:
port access vlan vlan-id
c Assign the trunk port to the
specified VLANs:
port trunk permit vlan
{ vlan-id-list | all }
d Assign the hybrid port to the
specified VLANs:
port hybrid vlan vlan-id-list
{ tagged | untagged }
Select substep b, c, or d
depending on the port link type.
15. Configure the downlink
port as a host or trunk
secondary port.
• Configure the downlink port as a
host port:
port private-vlan host
• Configure the downlink port as a
trunk secondary port of the
specified VLANs:
port private-vlan vlan-id-list
trunk secondary
By default, a port is not a host or
trunk secondary port.
16. Return to system view.
quit
N/A
17. Enter VLAN view of a
secondary VLAN.
vlan
vlan-id
N/A
18. (Optional.) Enable Layer 2
communication for ports in
the same secondary
VLAN.
• undo private-vlan isolated
• private-vlan community
By default, ports in the same
secondary VLAN can
communicate with each other at
Layer 2.