CLI Reference Guide

VLAN Commands 833
An isolated VLAN is used by isolated ports to communicate with
promiscuous ports. It does not carry traffic to other community ports or other
isolated ports with the same primary VLAN.
The primary VLAN is the VLAN that carries traffic from a promiscuous port
to the private ports.
VLAN 1 cannot be configured in a private VLAN configuration.
Examples
console# configure terminal
console(config)# vlan 10
console(config-vlan)# private-vlan primary
console(config-vlan)# exit
console(config)# vlan 1001
console(config-vlan)# private-vlan isolated
console(config-vlan)# exit
console(config)# vlan 1002
console(config-vlan)# private-vlan community
console(config-vlan)# exit
console(config)# vlan 1003
console(config-vlan)# private-vlan community
console(config-vlan)# exit
console(config)# vlan 20
console(config-vlan)# private-vlan association 1001-1003
console(config-vlan)# end
show vlan private-vlan
Use the show vlan private-vlan command in Privileged EXEC mode to
display information about the configured private VLANs including primary
and secondary VLAN IDs, type (community, isolated, or primary), and the
ports which belong to a private VLAN.
Syntax
show vlan private-vlan [type]
Default Configuration
This command has no default setting.
2CSNXXX_SWUM200.book Page 833 Tuesday, December 10, 2013 1:22 PM