Administrator Guide

Configuration Task List
The following sections contain the procedures that configure a private VLAN.
● Creating PVLAN Ports
● Creating a Primary VLAN
● Creating a Community VLAN
● Creating an Isolated VLAN
Creating PVLAN ports
PVLAN ports are those that will be assigned to the PVLAN.
1. Access INTERFACE mode for the port that you want to assign to a PVLAN.
CONFIGURATION mode
interface interface
2. Enable the port.
INTERFACE mode
no shutdown
3. Set the port in Layer 2 mode.
INTERFACE mode
switchport
4. Select the PVLAN mode.
INTERFACE mode
switchport mode private-vlan {host | promiscuous | trunk}
● host (isolated or community VLAN port)
● promiscuous (intra-VLAN communication port)
● trunk (inter-switch PVLAN hub port)
For interface details, refer to Enabling a Physical Interface in the Interfaces chapter.
NOTE:
You cannot add interfaces that are configured as PVLAN ports to regular VLANs. Conversely, you cannot add
“regular” ports (ports not configured as PVLAN ports) to PVLANs.
The example below shows the switchport mode private-vlan command on a port and on a port channel.
Dell#conf
Dell(conf)#interface TengigabitEthernet 2/1
Dell(conf-if-te-2/1)#switchport mode private-vlan promiscuous
Dell(conf)#interface TengigabitEthernet 2/2
Dell(conf-if-te-2/2)#switchport mode private-vlan host
Dell(conf)#interface TengigabitEthernet 2/3
Dell(conf-if-te-2/3)#switchport mode private-vlan trunk
Dell(conf)#interface TengigabitEthernet 2/2
Dell(conf-if-te-2/2)#switchport mode private-vlan host
Dell(conf)#interface port-channel 10
Dell(conf-if-po-10)#switchport mode private-vlan promiscuous
Creating a Primary VLAN
A primary VLAN is a port-based VLAN that is specifically enabled as a primary VLAN to contain the promiscuous ports and
PVLAN trunk ports for the private VLAN.
A primary VLAN also contains a mapping to secondary VLANs, which are comprised of community VLANs and isolated VLANs.
774
Private VLANs (PVLAN)