Cisco 4500M Command Reference Manual page 236

private-vlan
An isolated VLAN is a VLAN used by isolated ports to communicate with promiscuous ports. The
isolated VLAN traffic is blocked on all other private ports in the same VLAN and can be received only
by standard trunking ports and promiscuous ports assigned to the corresponding primary VLAN.
A promiscuous port is a private port assigned to a primary VLAN.
A primary VLAN is a VLAN used to convey the traffic from the switches to customer end stations on
private ports.
You can specify only one isolated vlan-id value , while multiple community VLANs are allowed. You
can only associate isolated and community VLANs to one VLAN. The associated VLAN list may not
contain primary VLANs. Similarly, a VLAN already associated to a primary VLAN cannot be
configured as a primary VLAN.
The private-vlan commands do not take effect until you exit the config-VLAN submode.
If you delete either the primary or secondary VLAN, the ports associated with the VLAN become
inactive.
Refer to the Catalyst4500 Series Switch CiscoIOS Software Configuration Guide for additional
configuration guidelines.
Examples
This example shows how to create a PVLAN relationship among the primary VLAN 14, the isolated
VLAN 19, and community VLANs 20 and 21:
Switch(config)# vlan 19
Switch(config-vlan) # private-vlan isolated
Switch(config)# vlan 14
Switch(config-vlan)# private-vlan primary
Switch(config-vlan)# private-vlan association 19
This example shows how to remove an isolated VLAN from the PVLAN association:
Switch(config)# vlan 14
Switch(config-vlan)# private-vlan association remove 18
Switch(config-vlan)#
This example shows how to remove a PVLAN relationship and deletes the primary VLAN. The
associated secondary VLANs are not deleted.
Switch(config-vlan)# no private-vlan 14
Switch(config-vlan)#
Related Commands
show vlan
show vlan private-vlan
Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW
2-204
Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches
78-16201-01