12-10
Cisco ME 3400 Ethernet Access Switch Software Configuration Guide
OL-9639-06
Chapter 12 Configuring Private VLANs
Configuring Private VLANs
Configuring and Associating VLANs in a Private VLAN
Beginning in privileged EXEC mode, follow these steps to configure a private VLAN:
Note The private-vlan commands do not take effect until you exit VLAN configuration mode.
When you associate secondary VLANs with a primary VLAN, note this syntax information:
• The secondary_vlan_list parameter cannot contain spaces. It can contain multiple comma-sep arated
items. Each item can be a single private-VLAN ID or a hyphenated range of private-VLAN IDs.
Command Purpose
Step 1 configure terminal Enter global configuration mode.
Step 2 vlan vlan-id Enter VLAN configuration mode and designate or create a VLAN that
will be the primary VLAN. The VLAN ID range is 2 to 1001 and 1006
to 4094.
Note If the VLAN has been configured as a UNI-ENI community
VLAN, you must enter the no uni-vlan VLAN configuration
command before configuring a private VLAN.
Step 3 private-vlan primary Designate the VLAN as the primary VLAN.
Step 4 exit Return to global configuration mode.
Step 5 vlan vlan-id (Optional) Enter VLAN configuration mode and designate or create a
VLAN that will be an isolated VLAN. The VLAN ID range is 2 to 1001
and 1006 to 4094.
Step 6 private-vlan isolated Designate the VLAN as an isolated VLAN.
Step 7 exit Return to global configuration mode.
Step 8 vlan vlan-id (Optional) Enter VLAN configuration mode and designate or create a
VLAN that will be a community VLAN. The VLAN ID range is 2 to
1001 and 1006 to 4094.
Note If the VLAN has been configured as a UNI-ENI community
VLAN, you must enter the no uni-vlan VLAN configuration
command before configuring a private VLAN.
Step 9 private-vlan community Designate the VLAN as a community VLAN.
Step 10 exit Return to global configuration mode.
Step 11 vlan vlan-id Enter VLAN configuration mode for the primary VLAN designated in
Step 3.
Step 12 private-vlan association [add | remove]
secondary_vlan_list Associate the secondary VLANs with the primary VLAN.
Step 13 end Return to privileged EXEC mode.
Step 14 show vlan private-vlan [type]
or
show interfaces status
Verify the configuration.
Step 15 copy running-config startup config (Optional) Save your entries in the switch startup configuration file.