Creating a Community VLAN
A community VLAN is a secondary VLAN of the primary VLAN in a Private VLAN. The ports in a
community VLAN can talk to each other and with the promiscuous ports in the primary VLAN. To create
a community VLAN, follow these steps:
Step
Command Syntax
1
interface vlan vlan-id
no shutdown
2
3
private-vlan mode
community
4
tagged interface
or
untagged interface
Creating an Isolated VLAN
An isolated VLAN is a secondary VLAN of a primary VLAN. Its ports can only talk with the promiscuous
ports in that primary VLAN. To create an isolated VLAN, follow these steps:
Step
Command Syntax
1
interface vlan vlan-id
2
no shutdown
3
private-vlan mode isolated
4
tagged interface
or
untagged interface
To configure the PVLAN member VLANs (primary, community, and isolated VLANs), use the following
commands in VLAN INTERFACE mode
396
|
Private VLANs (PVLAN)
Command Mode
Purpose
CONFIGURATION
Access INTERFACE VLAN mode for the VLAN that you
want to make a community VLAN.
INTERFACE VLAN
Enable the VLAN.
INTERFACE VLAN
Set PVLAN mode of the selected VLAN to community.
INTERFACE VLAN
Add one or more host ports to the VLAN. The interfaces
can be entered singly or in range format, either
comma-delimited (
port-port).
You can only add host (isolated) ports to the VLAN.
Command Mode
Purpose
CONFIGURATION
Access INTERFACE VLAN mode for the VLAN that you
want to make an isolated VLAN.
INTERFACE VLAN
Enable the VLAN.
INTERFACE VLAN
Set PVLAN mode of the selected VLAN to isolated.
INTERFACE VLAN
Add one or more host ports to the VLAN. The interfaces
can be entered singly or in range format, either
comma-delimited (
port-port).
You can only add ports defined as
(Figure
22-2).
,
) or hyphenated (
slot/port
port,port
,
) or hyphenated (
slot/port
port,port
to the VLAN.
host
slot/
slot/