Create a Private VLAN

About this task

You can create a private VLAN and set the port type. The primary and secondary VLAN IDs are associated with the same MTSI, the secondary VLAN inherits the primary VLAN configuration. You cannot create another VLAN with the same VLAN ID as the secondary VLAN. The secondary VLAN cannot be any other type of VLAN other than a secondary VLAN.

1. Enter Global Configuration mode:

   enable

   configure terminal

2. Create a private VLAN:

   vlan create <2-4059> type pvlan-mstprstp secondary <2-4059>

3. Specify a name for the VLAN:

   vlan create <2-4059> name

4. Enter GigabitEthernet Interface Configuration mode:

   interface GigabitEthernet {slot/port[/sub-port][-slot/port[/sub-port]][,...][slot/all][all]}

   

   Note

   If the platform supports channelization and the port is channelized, you must also specify the sub-port in the format slot/port/sub-port.

5. Set the port type:

   private-vlan <isolated|promiscuous|trunk}

   

   Note

   If the port is a member of an MLT, the port inherits the private VLAN port type of the MLT.

6. Exit to Global Configuration mode:

   exit

7. Enter VLAN Interface Configuration mode:

   enable

   configure terminal

   interface vlan <1–4059>

8. Add ports to the primary VLAN:

   vlan members add <1-4059> {slot/port[/sub-port][-slot/port[/sub-port]][,...][slot/all][all]}

Example

Switch:1> enable

Switch:1# configure terminal

Switch:1(config)# vlan create 2 type pvlan-mstprstp 6 secondary 5

Switch:1(config)# interface gigabitethernet 1/36

Switch:1(config-if)# private-vlan isolated

Switch:1(config-if)# exit

Switch:1(config)# interface vlan 2

Switch:1(config-if)# vlan members add 2 1/36