Cisco WS-C3020 Software Configuration Manual page 328

Configuring Private VLANs
Command
Step 11
exit
Step 12 vlan vlan-id
Step 13 private-vlan association [add | remove]
secondary_vlan_list
Step 14 end
Step 15
show vlan private-vlan [type]
or
show interfaces status
Step 16 copy running-config startup config
When you associate secondary VLANs with a primary VLAN, note this syntax information:
•
•
•
•
•
This example shows how to configure VLAN 20 as a primary VLAN, VLAN 501 as an isolated VLAN,
and VLANs 502 and 503 as community VLANs, to associate them in a private VLAN, and to verify the
configuration:
Switch# configure terminal
Switch(config)# vlan 20
Switch(config-vlan)# private-vlan primary
Switch(config-vlan)# exit
Switch(config)# vlan 501
Switch(config-vlan)# private-vlan isolated
Switch(config-vlan)# exit
Switch(config)# vlan 502
Switch(config-vlan)# private-vlan community
Switch(config-vlan)# exit
Switch(config)# vlan 503
Switch(config-vlan)# private-vlan community
Switch(config-vlan)# exit
Switch(config)# vlan 20
Switch(config-vlan)# private-vlan association 501-503
Switch(config-vlan)# end
Cisco Catalyst Blade Switch 3020 for HP Software Configuration Guide
14-10
The secondary_vlan_list parameter cannot contain spaces. It can contain multiple comma-separated
items. Each item can be a single private-VLAN ID or a hyphenated range of private-VLAN IDs.
The secondary_vlan_list parameter can contain multiple community VLAN IDs but only one
isolated VLAN ID.
Enter a secondary_vlan_list, or use the add keyword with a secondary_vlan_list to associate
secondary VLANs with a primary VLAN.
Use the remove keyword with a secondary_vlan_list to clear the association between secondary
VLANs and a primary VLAN.
The command does not take effect until you exit VLAN configuration mode.
Purpose
Return to global configuration mode.
Enter VLAN configuration mode for the primary VLAN designated in
Step 2.
Associate the secondary VLANs with the primary VLAN.
Return to privileged EXEC mode.
Verify the configuration.
Save your entries in the switch startup configuration file. To save the
private-VLAN configuration, you need to save the VTP transparent
mode configuration and private-VLAN configuration in the switch
startup configuration file. Otherwise, if the switch resets, it defaults to
VTP server mode, which does not support private VLANs.
Chapter 14 Configuring Private VLANs
OL-8915-03