VLAN C
OMMANDS
4-197
6. Use the show vlan private-vlan command to verify your
configuration settings.
To configure isolated VLANs, follow these steps:
1. Use the private-vlan command to designate an isolated VLAN
that will contain a single promiscuous port and one or more
isolated ports.
2. Use the switchport mode private-vlan command to configure one
port as promiscuous (i.e., having access to all ports in the isolated
VLAN) one or more ports as host (i.e., isolated port).
3. Use the switchport private-vlan isolated command to assign a port
to an isolated VLAN.
4. Use the show vlan private-vlan command to verify your
configuration settings.
private-vlan
Use this command to create a primary, community, or isolated private
VLAN. Use the no form to remove the specified private VLAN.
Syntax
private-vlan vlan-id {community | primary | isolated}
no private-vlan vlan-id
• vlan-id - ID of private VLAN. (Range: 1-4094, no leading zeroes).
• community – A VLAN in which traffic is restricted to host
memebers in the same VLAN and to promiscuous ports in the
associate primary VLAN.
• primary – A VLAN which can contain one or more community
VLANs, and serves to channel traffic between community VLANs
and other locations.
• isolated – Specifies an isolated VLAN. Ports assigned to an
isolated VLAN can only communicate with the promiscuous port
within their own VLAN.