VLAN C
ONFIGURATION

3-167

Configuring Private VLANs

Private VLANs provide port-based security and isolation between ports
within the assigned VLAN. Data traffic on downlink ports can only be
forwarded to, and from, uplink ports. (Note that private VLANs and
normal VLANs can exist simultaneously within the same switch.)

Enabling Private VLANs

Use the Private VLAN Status page to enable/disable the Private VLAN
function.
Web – Click VLAN, Private VLAN, Status. Select Enable or Disable from
the scroll-down box, and click Apply.
CLI – This example enables private VLANs.
Console(config)#pvlan3-70
Console(config)#
UplinkPorts
PrimaryVLAN
(promiscuousports)
x
DownlinkPorts
SecondaryVLAN
(privateports)