Cisco Catalyst 3750-E Software Configuration Manual page 481

Chapter 16 Configuring Private VLANs
This example shows how to configure VLAN 20 as a primary VLAN, VLAN 501 as an isolated VLAN,
and VLANs 502 and 503 as community VLANs, to associate them in a private VLAN, and to verify the
configuration:
Switch# configure terminal
Switch(config)# vlan 20
Switch(config-vlan)# private-vlan primary
Switch(config-vlan)# exit
Switch(config)# vlan 501
Switch(config-vlan)# private-vlan isolated
Switch(config-vlan)# exit
Switch(config)# vlan 502
Switch(config-vlan)# private-vlan community
Switch(config-vlan)# exit
Switch(config)# vlan 503
Switch(config-vlan)# private-vlan community
Switch(config-vlan)# exit
Switch(config)# vlan 20
Switch(config-vlan)# private-vlan association 501-503
Switch(config-vlan)# end
Switch(config)# show vlan private vlan
Primary Secondary Type
------- --------- ----------------- ------------------------------------------
20
20
20
20
Configuring a Layer 2 Interface as a Private-VLAN Host Port
Beginning in privileged EXEC mode, follow these steps to configure a Layer 2 interface as a
private-VLAN host port and to associate it with primary and secondary VLANs:
Note Isolated and community VLANs are both secondary VLANs.
Command
Step 1 configure terminal
Step 2
interface interface-id
Step 3
switchport mode private-vlan host
Step 4
switchport private-vlan host-association
primary_vlan_id secondary_vlan_id
Step 5 end
Step 6 show interfaces [interface-id] switchport
Step 7 copy running-config startup config
OL-9775-08
501 isolated
502 community
503 community
504 non-operational
Ports
Purpose
Enter global configuration mode.
Enter interface configuration mode for the Layer 2
interface to be configured.
Configure the Layer 2 port as a private-VLAN host port.
Associate the Layer 2 port with a private VLAN.
Return to privileged EXEC mode.
Verify the configuration.
(Optional) Save your entries in the switch startup
configuration file.
Catalyst 3750-E and 3560-E Switch Software Configuration Guide
Configuring Private VLANs
16-11