Private-Vlan - Cisco Catalyst 3560X-24P Command Reference Manual

private-vlan

private-vlan
Use the private-vlan VLAN configuration command on the switch stack or on a standalone switch to
configure private VLANs and to configure the association between private-VLAN primary and
secondary VLANs. Use the no form of this command to return the VLAN to normal VLAN
configuration.
Note This command is not supported on switches running the LAN base feature set.
Syntax Description
association
secondary-vlan-list
add
remove
community
isolated
primary
Defaults
The default is to have no private VLANs configured.
Command Modes VLAN configuration
Command History Release
12.2(53)SE2
Usage Guidelines
Before configuring private VLANs, you must disable VTP (VTP mode transparent). After you configure
a private VLAN, you should not change the VTP mode to client or server.
VTP does not propagate private-VLAN configuration. You must manually configure private VLANs on
all switches in the Layer 2 network to merge their Layer 2 databases and to prevent flooding of
private-VLAN traffic.
You cannot include VLAN 1 or VLANs 1002 to 1005 in the private-VLAN configuration. Extended
VLANs (VLAN IDs 1006 to 4094) can be configured in private VLANs.
Catalyst 3750-X and 3560-X Switch Command Reference
2-466
private-vlan {association [add | remove] secondary-vlan-list | community | isolated | primary}
no private-vlan {association | community | isolated | primary}
Create an association between the primary VLAN and a secondary VLAN.
Specify one or more secondary VLANs to be associated with a primary
VLAN in a private VLAN.
Associate a secondary VLAN to a primary VLAN.
Clear the association between a secondary VLAN and a primary VLAN.
Designate the VLAN as a community VLAN.
Designate the VLAN as a community VLAN.
Designate the VLAN as a community VLAN.
Modification
This command was introduced.
Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands
OL-21522-02