34-6
Software Configuration Guide—Release 12.2(25)SG
OL-76590-03
Chapter 34 Configuring Private VLANs
How to Configure PVLANs
Primary Secondary Type Interfaces
------- --------- ----------------- ------------------------------------------
202 primary
This example shows how to configure VLAN 303 as a community VLAN and verify the configuration:
Switch# configure terminal
Switch(config)# vlan 303
Switch(config-vlan)# private-vlan community
Switch(config-vlan)# end
Switch# show vlan private-vlan
Primary Secondary Type Interfaces
------- --------- ----------------- ------------------------------------------
202 primary
303 community
This example shows how to configure VLAN 440 as an isolated VLAN and verify the configuration:
Switch# configure terminal
Switch(config)# vlan 440
Switch(config-vlan)# private-vlan isolated
Switch(config-vlan)# end
Switch# show vlan private-vlan
Primary Secondary Type Interfaces
------- --------- ----------------- ------------------------------------------
202 primary
303 community
440 isolated
Associating a Secondary VLAN with a Primary VLAN
To associate secondary VLANs with a primary VLAN, perform this task:
When you associate secondary VLANs with a primary VLAN, note the following:
• The secondary_vlan_list parameter cannot contain spaces. It can contain multiple comma-separated
items. Each item can be a single private VLAN ID or a hyphenated range of private VLAN IDs.
• The secondary_vlan_list parameter can contain multiple community VLAN IDs.
• The secondary_vlan_list parameter can contain only one isolated VLAN ID.
• Enter a secondary_vlan_list or use the add keyword with a secondary_vlan_list to associate
secondary VLANs with a primary VLAN.
Command Purpose
Step 1
Switch# configure terminal
Enters configuration mode.
Step 2
Switch(config)# vlan
primary_vlan_ID
Enters VLAN configuration mode for the primary
VLAN.
Step 3
Switch(config-vlan)# [no] private-vlan
association {
secondary_vlan_list
| add
secondary_vlan_list
| remove
secondary_vlan_list
}
Associates the secondary VLAN with the primary
VLAN. The list can contain only one VLAN.
You can use the no keyword to clear all secondary
associations.
Step 4
Switch(config-vlan)# end
Exits VLAN configuration mode.
Step 5
Switch# show vlan private-vlan [type]
Verifies the configuration.
