Concept Guide
The following example shows the switchport mode private-vlan command on a port and on a port channel.
DellEMC#conf
DellEMC(conf)#interface GigabitEthernet 2/1
DellEMC(conf-if-gi-2/1)#switchport mode private-vlan promiscuous
DellEMC(conf)#interface GigabitEthernet 2/2
DellEMC(conf-if-gi-2/2)#switchport mode private-vlan host
DellEMC(conf)#interface GigabitEthernet 2/3
DellEMC(conf-if-gi-2/3)#switchport mode private-vlan trunk
DellEMC(conf)#interface GigabitEthernet 2/2
DellEMC(conf-if-gi-2/2)#switchport mode private-vlan host
DellEMC(conf)#interface port-channel 10
DellEMC(conf-if-po-10)#switchport mode private-vlan promiscuous
Creating a Primary VLAN
A primary VLAN is a port-based VLAN that is specically enabled as a primary VLAN to contain the promiscuous ports and PVLAN trunk
ports for the private VLAN.
A primary VLAN also contains a mapping to secondary VLANs, which comprise community VLANs and isolated VLANs.
1 Access INTERFACE VLAN mode for the VLAN to which you want to assign the PVLAN interfaces.
CONFIGURATION mode
interface vlan vlan-id
2 Enable the VLAN.
INTERFACE VLAN mode
no shutdown
3 Set the PVLAN mode of the selected VLAN to primary.
INTERFACE VLAN mode
private-vlan mode primary
4 Map secondary VLANs to the selected primary VLAN.
INTERFACE VLAN mode
private-vlan mapping secondary-vlan vlan-list
The list of secondary VLANs can be:
• Specied in comma-delimited (VLAN-ID,VLAN-ID) or hyphenated-range format (VLAN-ID-VLAN-ID).
• Specied with this command even before they have been created.
• Amended by specifying the new secondary VLAN to be added to the list.
5 Add promiscuous ports as tagged or untagged interfaces.
INTERFACE VLAN mode
tagged interface or untagged interface
Add PVLAN trunk ports to the VLAN only as tagged interfaces.
You can enter interfaces in numeric or in range format, either comma-delimited (slot/port,port,port) or hyphenated (slot/
port-port).
You can only add promiscuous ports or PVLAN trunk ports to the PVLAN (no host or regular ports).
666
Private VLANs (PVLAN)