mac

151
no private-vlan
Function: Configure current VLAN to Private VLAN. The no command cancels the
Private VLAN configuration.
Parameter: primary set current VLAN to Primary VLAN, isolated set current VLAN to
Isolated VLAN, community set current VLAN to Community VLAN.
Command Mode: VLAN mode
Default: Private VLAN is not configured by default.
Usage Guide: There are three Private VLANs: Primary VLAN, Isolated VLAN and
Community VLAN. Ports in Primary there are three Private VLANs: Primary VLAN,
Isolated VLAN and Community VLAN can communicate with ports of Isolated VLAN and
Community VLAN related to this Primary VLAN; Ports in Isolated VLAN are isolated
between each other and only communicate with ports in Primary VLAN they related to;
ports in Community VLAN can communicate both with each other and with Primary VLAN
ports they related to; there is no communication between ports in Community VLAN and
port in Isolated VLAN.
Only VLANs containing empty Ethernet ports can be set to Private VLAN, and only
the Private VLANs configured with associated private relationships can set the Access
Ethernet ports their member ports. Normal VLAN will clear its Ethernet ports when set to
Private VLAN.
It is to be noted Private VLAN messages will not be transmitted by GVRP.
Example: Set VLAN100, 200, 300 to private vlans, with respectively primary, Isolated,
Community types.
Switch(config)#vlan 100
Switch(Config-Vlan100)#private-vlan primary
Note:This will remove all the ports from vlan 100
Switch(Config-Vlan100)#exit
Switch(config)#vlan 200
Switch(Config-Vlan200)#private-vlan isolated
Note:This will remove all the ports from vlan 200
Switch(Config-Vlan200)#exit
Switch(config)#vlan 300
Switch(Config-Vlan300)#private-vlan community
Note:This will remove all the ports from vlan 300
Switch(Config-Vlan300)#exit
4.1.15 private-vlan association
Command: private-vlan association <secondary-vlan-list>