Configuration Guidelines
Configuration Example
1. Select a VLAN and define the Private VLAN type as primary.
2. Configure a promiscuous port for VLAN 700.
3. Configure two secondary VLANs: isolated VLAN and community VLAN.
4. Map secondary VLANs to primary VLAN.
© Copyright Lenovo 2015
The following guidelines apply when configuring Private VLANs:
Management VLANs cannot be Private VLANs. Management ports cannot be
members of a Private VLAN.
The default VLAN 1 cannot be a Private VLAN.
IGMP Snooping must be disabled on Private VLANs.
All VLANs that comprise the Private VLAN must belong to the same Spanning
Tree Group.
Follow this procedure to configure a Private VLAN.
CN4093(config)# vlan 700
CN4093(configvlan)# privatevlan primary
CN4093(configvlan)# exit
CN4093(config)# interface port 1
CN4093(configif)# switchport mode privatevlan
CN4093(configif)# switchport privatevlan mapping 700
CN4093(configif)# exit
CN4093(config)# vlan 701
CN4093(configvlan)# privatevlan isolated
CN4093(configvlan)# exit
CN4093(config)# vlan 702
CN4093(configvlan)# privatevlan community
CN4093(configvlan)# exit
CN4093(config)# vlan 700702
CN4093(configvlan)# stg 1
CN4093(configvlan)# exit
CN4093(config)# vlan 700
CN4093(configvlan)# privatevlan association 701,702
CN4093(configvlan)# exit
129
Chapter 9: VLANs