C
OMMAND
L
INE
I
NTERFACE
3-132
2. Use the private-vlan association command to map the secondary
(i.e., isolated or community) VLAN(s) to the primary VLAN.
3. Use the switchport mode private-vlan command to configure
ports as promiscuous (i.e., having access to all ports in the primary
VLAN), isolated (i.e., having access only to promiscuous ports in its
own VLAN), or host (i.e., having access restricted to community
VLAN members, and channeling all other traffic through a
promiscuous port).
4. Use the switchport private-vlan host-association command
to assign a port to a secondary VLAN.
5. Use the switchport private-vlan mapping command to assign a
port to a primary VLAN.
6. Use the show vlan private-vlan command to verify your
configuration settings.
private-vlan
Use this command to create a primary or secondary (i.e., isolated or
community) private VLAN. Use the no form to remove the specified
private VLAN.
Syntax
private-vlan vlan-id {community | isolated | primary}
no private-vlan vlan-id
• vlan-id – ID of private VLAN. (Range: 1-4093, no leading zeroes).
• community – Specifies a community VLAN.
• isolated – Specifies an isolated VLAN.
• primary – Specifies a primary VLAN.
Default Setting
None