3Configureinterfaces to be isolated or community host ports, and assign VLAN membership to the host
port.
4Configureinterfaces as promiscuous ports, and mapthe promiscuous ports tothe primary-secondary
VLANpair.
5Ifinter-VLAN routing will be used, configure the primary SVI, and map the secondary VLANs to the
primary.
6Verifythe private VLAN configuration.

Default Private VLAN Configuration

Noprivate VLANs areconfigured.
How to Configure Private VLANs

Configuring and Associating VLANs in a Private VLAN

Theprivate-vlan commands do not take effect until you exit VLAN configuration mode.
SUMMARY STEPS
1. configureterminal
2. vtpmode transparent
3. vlanvlan-id
4. private-vlanprimary
5. exit
6. vlanvlan-id
7. private-vlanisolated
8. exit
9. vlanvlan-id
10. private-vlancommunity
11. exit
12. vlanvlan-id
13. private-vlanassociation [add |remove]secondary_vlan_list
14. end
15. showvlan private-vlan[type] or show interfacesstatus
16. copyrunning-config startup config
Catalyst 2960-XR Switch VLAN Configuration Guide, Cisco IOS Release 15.0(2)EX1
OL-29440-01 93
Configuring Private VLANs
Default Private VLAN Configuration