Configuration Restrictions And Guidelines; Configuration Procedure - HP 6125XLG Configuration Manual

−
Configure a downlink port, for example, the port connecting Device B to a host in
a host port. The host port can be automatically assigned to the secondary VLAN and its
associated primary VLAN.
If a downlink port allows multiple secondary VLANs, configure the port as a trunk secondary
port. The trunk secondary port can be automatically assigned to the secondary VLANs and
their associated primary VLANs.
For more information about promiscuous, trunk promiscuous, host, and trunk secondary ports, see
Layer 2—LAN Switching Command Reference.
4. Associate the secondary VLANs with the primary VLAN.
5. (Optional.) Configure Layer 3 communication between the specified secondary VLANs that are
associated with the primary VLAN.

Configuration restrictions and guidelines

When you configure the private VLAN feature, follow these restrictions and guidelines:
After you complete the private VLAN configurations, perform the following tasks:
•
For a promiscuous port, make sure the following requirements are met:
−
−
For a host port, make sure the following requirements are met:
−
−
For a trunk promiscuous or trunk secondary port, make sure the port is a tagged member of the
primary VLAN or the secondary VLANs.
VLAN 1 (system default VLAN) does not support the private VLAN configuration.
•

Configuration procedure

To configure the private VLAN feature:
Step
1. Enter system view.
2. Create a VLAN and enter
VLAN view.
3. Configure the VLAN as a
primary VLAN.
4. Return to system view.
5. Create one or multiple
secondary VLANs.
When the port allows multiple primary VLANs, configure the port as a trunk promiscuous
port of these primary VLANs. The trunk promiscuous port can be automatically assigned to
the primary VLANs and their associated secondary VLANs.
The primary VLAN is the PVID of the port.
The port is an untagged member of the primary VLAN and secondary VLANs.
The PVID of the port is a secondary VLAN.
The port is an untagged member of the primary VLAN and secondary VLANs.
Command
system-view
vlan vlan-id
private-vlan primary
quit
vlan { vlan-id1 [ to vlan-id2 ] | all }
157
Figure
Remarks
N/A
N/A
By default, a VLAN is not a primary
VLAN.
N/A
N/A
38, as