Administrator Guide

Layer 2 Switching Commands 837
Command Mode
Interface Configuration (physical or port-channel)
User Guidelines
Do not configure private VLANs on ports configured with any of these
features:
Link Aggregation Control Protocol (LACP)
Multicast VLAN Registration (MVR)
Voice VLAN
It is recommended that the private VLAN host ports be configured as
spanning-tree portfast.
switchport private-vlan
Use the switchport private-vlan command in Interface Configuration mode
to define a private VLAN association for an isolated or community port or a
mapping for a promiscuous port.
Use the no form of the command to remove the private VLAN association or
mapping from the interface.
Syntax
switchport private-vlan {host-association primary-vlan-id secondary-vlan-id
| mapping primary-vlan-id [add|remove] secondary-vlan-list}
no switchport private-vlan {host-association|mapping}
host-association
—Defines VLAN associations for community or host
ports.
mapping
—Defines the private VLAN mapping for promiscuous ports.
primary-vlan-id
—Primary VLAN ID of a private VLAN.
secondary-vlan-id
—Secondary (isolated or community) VLAN ID of a
private VLAN.
add
—Associates the secondary VLAN with the primary one.
remove
—Deletes the secondary VLANs from the primary VLAN
association.
2CSNXXX_SWUM204.book Page 837 Monday, January 25, 2016 1:25 PM