Private-Vlan - Cisco WS-C3560E-24PD-E Command Reference Manual

Chapter 2 Catalyst 3560 Switch Cisco IOS Commands

private-vlan

Use the private-vlan VLAN configuration command to configure private VLANs and to configure the
association between private-VLAN primary and secondary VLANs. Use the no form of this command
to return the VLAN to normal VLAN configuration.
Syntax Description
association
secondary-vlan-list
add
remove
community
isolated
primary
Defaults The default is to have no private VLANs configured.
Command Modes
VLAN configuration
Command History Release
12.2(20)SE
Usage Guidelines
Before configuring private VLANs, you must disable VTP (VTP mode transparent). After you configure
a private VLAN, you should not change the VTP mode to client or server.
VTP does not propagate private-VLAN configuration. You must manually configure private VLANs on
all switches in the Layer 2 network to merge their Layer 2 databases and to prevent flooding of
private-VLAN traffic.
You cannot include VLAN 1 or VLANs 1002 to 1005 in the private-VLAN configuration. Extended
VLANs (VLAN IDs 1006 to 4094) can be configured in private VLANs.
78-16405-05
private-vlan {association [add | remove] secondary-vlan-list | community | isolated | primary}
no private-vlan {association | community | isolated | primary}
Create an association between the primary VLAN and a secondary VLAN.
Specify one or more secondary VLANs to be associated with a primary
VLAN in a private VLAN.
Associate a secondary VLAN to a primary VLAN.
Clear the association between a secondary VLAN and a primary VLAN.
Designate the VLAN as a community VLAN.
Designate the VLAN as a community VLAN.
Designate the VLAN as a community VLAN.
Modification
This command was introduced.
Catalyst 3560 Switch Command Reference
private-vlan
2-317