Private VLAN Commands

This section describes the commands to configure private-VLAN.

switchport private-vlan

This command is used to define a private-VLAN association for an isolated or community port or a mapping for a promiscuous port.

• Default: N/A
• Format: switchport private-vlan {host-association primary-vlan-id secondary-vlan-id | mapping primary-vlan-id {add | remove} secondary-vlan-list}
• Mode: Interface Config
• Error Completion Message: Unable to apply the configuration.

Parameter description

• host-association: defines VLAN association for community or host ports.
• mapping: defines the private VLAN mapping for promiscuous ports.
• primary-vlan-id: primary VLAN ID of a private VLAN.
• secondary-vlan-id: secondary (isolated or community) VLAN ID of a private VLAN.
• add: associates the secondary VLAN with the primary one.
• remove: deletes the secondary VLANs from the primary VLAN association.
• secondary-vlan-list: a list of secondary VLANs to be mapped to a primary VLAN.

no switchport private-vlan

This command is used to remove the private-VLAN association or mapping from the port.

• Format: no switchport private-vlan {host-association | mapping}
• Mode: Interface Config

switchport mode private-vlan

This command is used to configure a port as a promiscuous or host private VLAN port.

• Default: General
• Format: switchport mode private-vlan {host | promiscuous}
• Mode: Interface Config

Parameter description

• host: configures an interface as a private VLAN host port. It can be either isolated or community port depending on the secondary VLAN it is associated with.
• promiscuous: configures an interface as a private VLAN promiscuous port. The promiscuous ports are members of the primary VLAN.

no switchport mode private-vlan

This command is used to remove the private-VLAN association or mapping from the port.

• Format: no switchport mode
• Mode: Interface Config

private-vlan

This command is used to configure the private VLANs and to configure the association between the primary private VLAN and secondary VLANs.

• Default: N/A
• Format: private-vlan {association [add | remove] secondary-vlan-list | community | isolated | primary}
• Mode: VLAN Config

Parameter description

• association: associates the primary and secondary VLAN.
• secondary-vlan-list: a list of secondary VLANs to be mapped to a primary VLAN.
• community: designates a VLAN as a community VLAN.
• isolated: designates a VLAN as the isolated VLAN.
• primary: designates a VLAN as the primary VLAN.

no private-vlan

This command is used to restore normal VLAN configuration.

• Format: no private-vlan {association }
• Mode: VLAN Config

show vlan

This command displays information about the configured private VLANs including primary and secondary VLAN IDs, type (community, isolated, or primary) and the ports which belong to a private VLAN.

• Format: show vlan | private-vlan [type] |
• Mode: Priviliged EXEC

  private-vlan - displays information about the configured private VLANs

  type - displays only private VLAN ID and its type.

The command displays the following information:

• Primary: primary VLAN ID
• Secondary: secondary VLAN ID
• Type: secondary VLAN type
• Ports: ports which are associated with a private VLAN

show interface ethernet <interface >switchport

This command displays the private-VLAN mapping information for the switch interfaces.

• Format: show interface <ethernet interface-id> switchport
• Mode: Priviliged EXEC

The command displays the following information:

• Private-vlan host-association: displays VLAN association for the private-VLAN host ports.
• Private-vlan mapping: displays VLAN mapping for the private-VLAN promiscuous ports.