Configuration Guidelines
Configuration Example
1. Select a VLAN and define the Private VLAN type as primary.
2. Configure a promiscuous port for VLAN 700.
3. Configure two secondary VLANs: isolated VLAN and community VLAN.
4. Map secondary VLANs to primary VLAN.
5. Configure host ports for secondary VLANs.
© Copyright Lenovo 2017
The following guidelines apply when configuring Private VLANs:
The default VLAN 1 cannot be a Private VLAN.
IGMP Snooping must be disabled on Private VLANs.
All VLANs that comprise the Private VLAN must belong to the same Spanning
Tree Group.
Follow this procedure to configure a Private VLAN.
RS 8264CS(config)# vlan 700
RS 8264CS(config-vlan)# private-vlan primary
RS 8264CS(config-vlan)# exit
RS 8264CS(config)# interface port 1
RS 8264CS(config-if)# switchport mode private-vlan
RS 8264CS(config-if)# switchport private-vlan mapping 700
RS 8264CS(config-if)# exit
RS 8264CS(config)# vlan 701
RS 8264CS(config-vlan)# private-vlan isolated
RS 8264CS(config-vlan)# exit
RS 8264CS(config)# vlan 702
RS 8264CS(config-vlan)# private-vlan community
RS 8264CS(config-vlan)# exit
RS 8264CS(config)# vlan 700-702
RS 8264CS(config-vlan)# stg 1
RS 8264CS(config-vlan)# exit
RS 8264CS(config)# vlan 700
RS 8264CS(config-vlan)# private-vlan association 701,702
RS 8264CS(config-vlan)# exit
RS 8264CS(config)# interface port 2
RS 8264CS(config-if)# switchport mode private-vlan
RS 8264CS(config-if)# switchport private-vlan host-association 700 701
RS 8264CS(config-if)# exit
RS 8264CS(config)# interface port 3
RS 8264CS(config-if)# switchport mode private-vlan
RS 8264CS(config-if)# switchport private-vlan host-association 700 702
RS 8264CS(config-if)# exit
149
Chapter 8: VLANs