Reference Guide

Private VLANs | 783
Configure Private VLANs
Configuring Private VLANs is a 3-step process:
1. Configure PVLAN Ports
2. Place PVLAN Ports in a Secondary VLAN
3. Place the Secondary VLANs in a Primary VLAN
Related Configuration Tasks
• Private VLAN show Commands
Configure PVLAN Ports
You must assign switchports a PVLAN Port role—host, promiscuous, or trunk—before you can add them
to a primary or secondary VLAN.
• Host ports may not be a part of a non-private (regular) VLAN.
• Promiscuous ports may be a member of more than one primary VLAN, but may not be a member of
a regular VLAN.
• Trunk ports may be a member of a regular VLAN.
Place PVLAN Ports in a Secondary VLAN
PVLAN has two types of secondary VLANs:
Community VLANs:
• Can only have host ports.
• Host ports can communicate with each other and to promiscuous ports.
Isolated VLANs:
• Can only have host ports.
• Host ports cannot communicate with each other; they can only communicate with promiscuous ports.
Task Command Syntax Command Mode
Assign a PVLAN port role to a switchport. switchport mode private-vlan {host | promiscuous | trunk} INTERFACE
Step Task Command Syntax Command Mode
1 Access the INTERFACE VLAN mode for the VLAN that
you want to make a community VLAN.
interface vlan vlan-id CONFIGURATION