Specifications

2-451
Catalyst 4500 Se ries S wit ch C is co IO S C om mand R efer ence —Re lease I OS XE 3 .3.0 XO(1 5.1 (1)XO)
OL_28738 -01
Chapter 2 Cisco IOS Commands for the Catalyst 4500 Series Switches
private-vlan
private-vlan
To configure private VLANs and the association between a private VLAN and a secondary VLAN, use
the private-vlan command. To return to the default value, use the no form of this command.
private-vlan {isolated | com muni ty | twoway-community | primary}
private-vlan association s econdary- vlan-list [{add secondary-vlan- list} |
{remove se condary-vlan- list}]
no private-vlan { is olated | community | twoway-community | primary}
no private-vlan a ssociation
Syntax Description
Defaults Private VLANs are not con figured.
Command Modes VLAN configurati on mode
Usage Guidelines You cannot configure VLAN 1 or VLANs 1001 to 1005 as priva te VLANs.
VTP does not support private VLANs. You must configur e private VLANs on each device where you
want private VLAN ports.
The secondary_vlan_l ist parameter cannot contain spaces; it can contain multiple comma-separated
items. Each item can be a single private VLAN ID or a range of private VLAN IDs separated by hyphens.
The secondary_vlan_l ist parameter can contain multiple community VLAN IDs.
The secondary_vlan_list param eter can cont ain onl y one isol ated VLAN I D. A private V LAN is d efined
as a set of private ports characterized by a common set of VLAN number pairs: each pair is made up of
at least two special unidirectional VLANs and is used by isolated ports or by a community of ports to
communicate with the switches.
isolated Designates the VLAN as an isolated private VLAN.
communit y Designates the VLAN as the community private VLAN.
twoway-community Designates the VLAN as a host port that belongs to a twoway-community
secondary VLAN
primary Designates the VLAN as the primary private VLAN.
association Creates an association between a secondary VLAN and a primary VLAN.
secondary-vlan-list Specifies the number of the seconda ry VLAN.
The list can contain only one isolated VLAN ID; it can also contain multiple
community or twoway-community VLAN IDs
add (O ptional) As sociat es a secon dary VLAN t o a primary VL AN.
remove (Optional) Clears the association between a secondary VLAN and a primary
VLAN.