Cisco Catalyst 3750-E Software Configuration Manual page 480

Configuring Private VLANs
Command
Step 1 configure terminal
Step 2
vtp mode transparent
Step 3 vlan vlan-id
Step 4
private-vlan primary
Step 5 exit
Step 6 vlan vlan-id
Step 7 private-vlan isolated
Step 8
exit
Step 9
vlan vlan-id
Step 10
private-vlan community
Step 11 exit
Step 12 vlan vlan-id
Step 13 private-vlan association [add | remove]
secondary_vlan_list
Step 14 end
Step 15 show vlan private-vlan [type]
or
show interfaces status
Step 16 copy running-config startup config
When you associate secondary VLANs with a primary VLAN, note this syntax information:
•
•
•
•
•
Catalyst 3750-E and 3560-E Switch Software Configuration Guide
16-10
The secondary_vlan_list parameter cannot contain spaces. It can contain multiple comma-separated
items. Each item can be a single private-VLAN ID or a hyphenated range of private-VLAN IDs.
The secondary_vlan_list parameter can contain multiple community VLAN IDs but only one
isolated VLAN ID.
Enter a secondary_vlan_list, or use the add keyword with a secondary_vlan_list to associate
secondary VLANs with a primary VLAN.
Use the remove keyword with a secondary_vlan_list to clear the association between secondary
VLANs and a primary VLAN.
The command does not take effect until you exit VLAN configuration mode.
Purpose
Enter global configuration mode.
Set VTP mode to transparent (disable VTP).
Enter VLAN configuration mode and designate or create a VLAN that
will be the primary VLAN. The VLAN ID range is 2 to 1001 and 1006
to 4094.
Designate the VLAN as the primary VLAN.
Return to global configuration mode.
(Optional) Enter VLAN configuration mode and designate or create a
VLAN that will be an isolated VLAN. The VLAN ID range is 2 to 1001
and 1006 to 4094.
Designate the VLAN as an isolated VLAN.
Return to global configuration mode.
(Optional) Enter VLAN configuration mode and designate or create a
VLAN that will be a community VLAN. The VLAN ID range is 2 to
1001 and 1006 to 4094.
Designate the VLAN as a community VLAN.
Return to global configuration mode.
Enter VLAN configuration mode for the primary VLAN designated in
Step 2.
Associate the secondary VLANs with the primary VLAN.
Return to privileged EXEC mode.
Verify the configuration.
Save your entries in the switch startup configuration file. To save the
private-VLAN configuration, you need to save the VTP transparent
mode configuration and private-VLAN configuration in the switch
startup configuration file. Otherwise, if the switch resets, it defaults to
VTP server mode, which does not support private VLANs.
Chapter 16 Configuring Private VLANs
OL-9775-08