Create a Private VLAN

Before you begin

To create a private VLAN, you must configure the VLAN type to private and configure the private VLAN port type.
The ports you add to a private VLAN must have a port type of isolated, promiscuous, or trunk.

For additional information about the tabs referenced in this procedure, see the following sections:

In the navigation pane, expand Configuration > VLAN.
Select VLANs.
Select the Basic tab.
Select Insert.
For Id, type an unused VLAN ID, or use the ID provided.
Optional: For Name, type the VLAN name, or use the name provided.
Optional: For Color Identifier, select a color from the list, or use the color provided.
Optional: For MstpInstance, select an msti instance from the list.
For Type, select private.
For PortMembers, select the ellipsis (...).
Select the ports to add as member ports.

The ports that are selected are recessed, while the non-selected ports are not recessed. Port numbers that are dimmed cannot be selected as VLAN port members.
Select OK.
For Secondary Vlan, type an unused VLAN ID.
Select Insert.
In the Device Physical View, select the Private VLAN port members.
In the navigation pane, expand Configuration > Edit > Port.
Select General.
Select the VLAN tab.
For PrivateVlanPortType, select the port type.
Select Apply.