C
OMMAND
L
INE
I
NTERFACE
4-210
To configure private VLANs, follow these steps:
1. Use the private-vlan command to designate one or more community
VLANs and the primary VLAN that will channel traffic outside the
community groups.
2. Use the private-vlan association command to map the secondary
(i.e., community) VLAN(s) to the primary VLAN.
3. Use the switchport mode private-vlan command to configure ports
as promiscuous (i.e., having access to all ports in the primary VLAN)
or host (i.e., having access restricted to community VLAN members,
and channeling all other traffic through a promiscuous port).
4. Use the switchport private-vlan host-association command to
assign a port to a secondary VLAN.
5. Use the switchport private-vlan mapping command to assign a
port to a primary VLAN.
6. Use the show vlan private-vlan command to verify your
configuration settings.
private-vlan
Use this command to create a primary, isolated or community private
VLAN. Use the no form to remove the specified private VLAN.
Syntax
private-vlan vlan-id {community | primary | isolated}
no private-vlan vlan-id
• vlan-id - ID of private VLAN. (Range: 1-4094, no leading zeroes).
• community - A VLAN in which traffic is restricted to port
members.
• primary - A VLAN which can contain one or more community
Display Private VLAN Information
show vlan private-vlan Shows private VLAN information NE,
PE
4-217
Table 4-55 Private VLAN Commands
Command Function Mode Page
To Next Page
Loading...
Need help?
General
