DES-7200 Configuration Guide Chapter 8 Private VLAN Configuration
8-4
A port in the private VLAN can be a SPAN source port instead of a mirrored
destination port.
8.2 Configuring a Private
VLAN
8.2.1 Default Private
VLAN
Configuration
No Private VLAN is configured by default.
8.2.2 Configuring a
VLAN as a
Private VLAN
To configure a VLAN as a private VLAN, execute the following commands:
Command Description
configure terminal
Enter the global configuration mode.
vlan vid
Enter the VLAN configuration mode.
private-vlan{community | isolated|
primary}
Configure a private VLAN.
no private-vlan{community |
isolated | primary}
Remove the configured private VLAN.
end
Exit the VLAN configuration mode.
show vlan private-vlan [type]
Show a private VLAN
Note
The member port in the 802.1Q VLAN cannot be declared as a
private VLAN. VLAN 1 cannot be declared as a private VLAN as
well. If there is a trunk or uplink port in the 802.1Q VLAN, first
delete this VLAN from the allowed VLAN list. The following
conditions must be met in order to make a private VLAN become
active:
1. The primary VLAN is available.
2. The secondary VLANs are available.
3. The secondary VLANs are associated with the primary VLAN.
The following example configures 802.1Q VLAN as a private VLAN:
DES-7200# configure terminal
DES-7200(config)# vlan 303
DES-7200(config-vlan)# private-vlan community