Users Guide

● isolated—Configures the VLAN as an isolated VLAN.
● primary—Configures the VLAN as a primary VLAN.
Default Regular VLAN
Command Mode VLAN INTERFACE CONFIGURATION
Usage
Information
● Configures a PVLAN as a community, isolated, or primary VLAN. You must not add VLAN members
before you configure PVLAN mode.
● You can add the following port types to community, isolated, and primary VLANs:
○ PVLAN promiscuous to the primary VLAN
○ PVLAN secondary-port to community and isolated VLANs
○ Regular L2 switch ports in Access or Trunk mode to primary, community, and isolated VLANs
● To change a PVLAN mode, for example, from isolated to community, remove the current PVLAN mode
and then configure the new PVLAN mode.
● If secondary VLANs are mapped to a primary VLAN, remove the secondary-VLAN-to-primary-VLAN
mapping before you change the PVLAN mode of the VLANs.
● The no form of the command configures the VLAN mode back to a regular VLAN. You must remove
the VLAN members before you use the no form of the command.
Example—To
configure a
primary VLAN.
OS10(config)# interface vlan 10
OS10(conf-if-vl-10)# private-vlan mode primary
Example—To
configure an
isolated VLAN.
OS10(config)# interface vlan 20
OS10(conf-if-vl-20)# private-vlan mode isolated
Example—To
configure a
community
VLAN.
OS10(config)# interface vlan 30
OS10(conf-if-vl-30)# private-vlan mode community
Supported
Releases
10.5.2.0 or later
private-vlan mode (Port mode)
Configures PVLAN port mode.
Syntax
private-vlan mode {promiscuous | secondary-port}
Parameters
● promiscuous—Configures the port as a promiscuous port.
● secondary-port—Configures the port as a secondary port.
Default None
Command Mode INTERFACE CONFIGURATION
Usage
Information
● This command is applicable only for physical and port channel interfaces. Configures an interface as
one of the following PVLAN ports:
○ Promiscuous port: Depending on the Switchport mode configuration, this port can be an Access or
a Trunk port.
○ Secondary port: A secondary port can be an isolated or a community port. Depending on the
Switchport mode configuration, this port can be an Access or a Trunk port.
● This configuration takes effect only when this interface is associated with a PVLAN. Unless this
interface is associated with a PVLAN, it continues to function as a normal access or trunk port.
● The no form of this command removes PVLAN port mode.
NOTE: If this port is a member of a primary or secondary VLAN, you cannot configure or reset
PVLAN port mode.
674 Layer 2