Administrator Guide

Layer 2 Switching Commands 833
switchport mode private-vlan
Use the switchport mode private-vlan command in Interface Configuration
mode to define a private VLAN association for an isolated or community
interface or a mapping for a promiscuous interface.
Use the no form of the command to remove the private VLAN association or
mapping from the interface.
Syntax
switchport mode private-vlan {host|promiscuous}
no switchport mode
• host—Configure the interface as a private VLAN host port. Host ports are
community or isolated ports, depending on the VLAN to which they
belong.
• promiscuous—Configure the interface as a private VLAN promiscuous
port. Promiscuous ports are members of the primary VLAN.
Default Configuration
This command has no default configuration. By default, a port is neither
configured as promiscuous or host.
Command Mode
Interface Configuration (physical or port-channel)
User Guidelines
Do not configure private VLANs on ports configured with any of these
features:
• Link Aggregation Control Protocol (LACP)
• Multicast VLAN Registration (MVR)
• Voice VLAN
It is recommended that the private VLAN host ports be configured as
spanning-tree portfast.
Example
console(config)#interface gigabitethernet 1/0/8