Configuring Isolated Subscriber VLAN Ports

When a port is successfully added to an isolated VLAN, the port is isolated from other ports in the same VLAN, and all egress traffic from the port is translated to the VLAN tag for that VLAN (unless the port is configured as untagged).

Note

To configure VLAN translation for network VLAN ports, see Configuring Network VLAN Ports for VLAN Translation.

The process for configuring ports for VLAN isolation requires two tasks:

Add a VLAN to the PVLAN as an isolated subscriber VLAN.
Assign ports to the isolated subscriber VLAN.

These tasks can be completed in any order, but they must both be completed before a port can participate in an isolated VLAN.

To add an isolated subscriber VLAN to the PVLAN, use the following command:
configure private-vlan name add subscriber vlan_name
To add ports to an isolated VLAN (before or after it is added to the PVLAN), use the following command:
configure {vlan} vlan_name | vlan_list add ports [port_list | all] {tagged | untagged} {{stpd} stpd_name} {dot1d | emistp | pvst-plus}}

If you specify the tagged option, egress traffic uses the isolated VLAN tag, regardless of the network translation configuration on any network port with which these ports communicate. Egress traffic from an isolated VLAN port never carries the network VLAN tag.