Switchport Private-Vlan - Cisco Catalyst 3750 Command Reference Manual

Chapter 2 Catalyst 3750 Switch Cisco IOS Commands

switchport private-vlan

Use the switchport private-vlan interface configuration command on the switch stack or on a standalone
switch to define a private-VLAN association for an isolated or community port or a mapping for a
promiscuous port. Use the no form of this command to remove the private-VLAN association or
mapping from the port.
This command is available only if the stack master is running the enhanced multilayer image (EMI). We
strongly recommend that the stack members also run the EMI when private VLANs are configured.
Syntax Description association
host
primary-vlan-id
secondary-vlan-id
mapping
add
remove
secondary-vlan-list
host-association
Defaults The default is to have no private-VLAN association or mapping configured.
Command Modes
Interface configuration
Command History Release
12.2(20)SE
Usage Guidelines
Private-VLAN association or mapping has no effect on the port unless the port has been configured as a
private-VLAN host or promiscuous port by using the switchport mode private-vlan {host |
promiscuous} interface configuration command.
If the port is in private-VLAN host or promiscuous mode but the VLANs do not exist, the command is
allowed, but the port is made inactive.
78-16181-03
switchport private-vlan {association {host primary-vlan-id secondary-vlan-id | mapping
primary-vlan-id {add | remove} secondary-vlan-list} | host-association primary-vlan-id
secondary-vlan-id | mapping primary-vlan-id {add | remove} secondary-vlan-list}
no switchport private-vlan {association {host | mapping} | host-association | mapping
Define a private-VLAN association for a port.
Define a private-VLAN association for a community or isolated host port.
The VLAN ID of the private-VLAN primary VLAN. The range is from 2 to
1001 and 1006 to 4094.
The VLAN ID of the private-VLAN secondary (isolated or community) VLAN.
The range is from 2 to 1001 and 1006 to 4094.
Define private-VLAN mapping for a promiscuous port.
Associate secondary VLANs to the primary VLAN.
Clear the association between secondary VLANs and the primary VLAN.
One or more secondary (isolated or community) VLANs to be mapped to the
primary VLAN.
Define a private-VLAN association for a community or isolated host port.
Modification
This command was introduced.
switchport private-vlan
Catalyst 3750 Switch Command Reference
2-583