Users Guide

VLANs 813
To ensure that CoS queue 4 packets are always transmitted first, CoS queue 4
could be made a strict-priority queue. In this case, it would be prudent to rate
limit CoS queue 4 traffic.
1 Create an access list that permits all traffic and assign it to CoS queue 4.
console#config
console(config)#ip access-list voice-vlan
console(config-ip-acl)#permit every assign-queue 4
console(config-ip-acl)#exit
2 Assign the access list to VLAN 25. The access-group is given sequence
number 100.
console(config)#interface vlan 25
console(config-if-vlan25)#ip access-group voice-vlan in 100
console(config-if-vlan25)#exit
Configuring a Private VLAN
1 Configure the VLANs and their roles. This example configures VLAN 100
as the primary VLAN, secondary VLAN 101 as the community VLAN and
secondary VLANs 102 and 103 as the isolated VLANs:
switch#configure
switch(config)#vlan 100
switch(config-vlan-100)#private-vlan primary
switch(config-vlan-100)#exit
switch(config)#vlan 101
switch(config-vlan-101)#private-vlan community
switch(config-vlan-101)#exit
switch(config)#vlan 102
switch(config-vlan-102)#private-vlan isolated
switch(config-vlan-102)#exit
switch(config)#vlan 103
switch(config-vlan-103)#private-vlan isolated
switch(config-vlan-103)#exit
2 Associate the community and isolated VLANs with the primary VLAN.
switch(config)#vlan 100
switch(config-vlan-100)#private-vlan association 101-102
switch(config-vlan-100)#exit
This completes the configuration of the private VLAN. The only
remaining step is to assign the ports to the private VLAN.
3 Assign the router connected port to the primary VLAN: