Private-Vlan - Cisco 4500M Command Reference Manual

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

private-vlan

To configure PVLANs and the association between a PVLAN and a secondary VLAN, use the
private-vlan commands. To return to the default value, use the no form of this command.
Syntax Description
isolated
primary
association
secondary-vlan-list
add
remove
Defaults
Private VLANs are not configured.
Command Modes
VLAN configuration
Command History Release
12.1(8a)EW
12.1(12c)EW
Usage Guidelines
You cannot configure VLAN 1 or VLANs 1001 to 1005 as PVLANs.
VTP does not support private VLANs. You must configure private VLANs on each device where you
want private VLAN ports.
The secondary_vlan_list parameter cannot contain spaces. It can contain multiple comma-separated
items. Each item can be a single PVLAN ID or a range of PVLAN IDs separated by hyphens.
The secondary_vlan_list parameter can contain multiple community VLAN IDs.
The secondary_vlan_list parameter can contain only one isolated VLAN ID. A PVLAN is defined as a
set of private ports characterized by a common set of VLAN number pairs: each pair is made up of at
least two special unidirectional VLANs and is used by isolated ports and/or by a community of ports to
communicate with switches.
78-16201-01
private-vlan {isolated | primary}
private-vlan association secondary-vlan-list [{add secondary-vlan-list} |
{remove secondary-vlan-list}]
no private-vlan {isolated | primary}
no private-vlan association
Designates the VLAN as an isolated PVLAN.
Designates the VLAN as the primary PVLAN.
Creates an association between a secondary VLAN and a primary VLAN.
Specifies the number of the secondary VLAN.
Associates a secondary VLAN to a primary VLAN.
Clears the association between a secondary VLAN and a primary VLAN.
Modification
Support for this command was introduced on the Catalyst 4500 series switch.
Support for extended addressing was added.
Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW
private-vlan
2-203