Configuring Private VLANs
This example shows how to configure VLAN 202 as a primary VLAN and verify the configuration:
Router# configure terminal
Router(config)# vlan 202
Router(config-vlan)# private-vlan primary
Router(config-vlan)# end
Router# show vlan private-vlan
Primary Secondary Type
------- --------- ----------------- ------------------------------------------
202
This example shows how to configure VLAN 303 as a community VLAN and verify the configuration:
Router# configure terminal
Router(config)# vlan 303
Router(config-vlan)# private-vlan community
Router(config-vlan)# end
Router# show vlan private-vlan
Primary Secondary Type
------- --------- ----------------- ------------------------------------------
202
This example shows how to configure VLAN 440 as an isolated VLAN and verify the configuration:
Router# configure terminal
Router(config)# vlan 440
Router(config-vlan)# private-vlan isolated
Router(config-vlan)# end
Router# show vlan private-vlan
Primary Secondary Type
------- --------- ----------------- ------------------------------------------
202
Associating Secondary VLANs with a Primary VLAN
To associate secondary VLANs with a primary VLAN, perform this task:
Command
Step 1
Router(config)# vlan primary_vlan_ID
Step 2
Router(config-vlan)# private-vlan association
{secondary_vlan_list | add secondary_vlan_list |
remove secondary_vlan_list}
Router(config-vlan)# no private-vlan association
Step 3
Router(config-vlan)# end
Step 4
Router# show vlan private-vlan [type]
When you associate secondary VLANs with a primary VLAN, note the following information:
•
•
Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY
13-12
primary
primary
303
community
primary
303
community
440
isolated
The secondary_vlan_list parameter cannot contain spaces. It can contain multiple comma-separated
items. Each item can be a single private VLAN ID or a hyphenated range of private VLAN IDs.
The secondary_vlan_list parameter can contain multiple community VLAN IDs.
Interfaces
Interfaces
Interfaces
Purpose
Enters VLAN configuration submode for the primary
VLAN.
Associates the secondary VLANs with the primary
VLAN.
Clears all secondary VLAN associations.
Exits VLAN configuration mode.
Verifies the configuration.
Chapter 13
Configuring Private VLANs
OL-11439-03