2-504
Catalyst 3750-X and 3560-X Switch Command Reference
OL-29704-01
Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands
private-vlan
private-vlan
Use the private-vlan VLAN configuration command on the switch stack or on a standalone switch to
configure private VLANs and to configure the association between private-VLAN primary and
secondary VLANs. Use the no form of this command to return the VLAN to normal VLAN
configuration.
private-vlan {association [add | remove] secondary-vlan-list | community | isolated | primary}
no private-vlan {association | community | isolated | primary}
Note This command is not supported on switches running the LAN base feature set.
Syntax Description
Defaults The default is to have no private VLANs configured.
Command Modes VLAN configuration
Command History
Usage Guidelines Before configuring private VLANs, you must disable VTP (VTP mode transparent). After you configure
a private VLAN, you should not change the VTP mode to client or server.
VTP does not propagate private-VLAN configuration. You must manually configure private VLANs on
all switches in the Layer 2 network to merge their Layer 2 databases and to prevent flooding of
private-VLAN traffic.
You cannot include VLAN 1 or VLANs 1002 to 1005 in the private-VLAN configuration. Extended
VLANs (VLAN IDs 1006 to 4094) can be configured in private VLANs.
association Create an association between the primary VLAN and a secondary VLAN.
secondary-vlan-list Specify one or more secondary VLANs to be associated with a primary
VLAN in a private VLAN.
add Associate a secondary VLAN to a primary VLAN.
remove Clear the association between a secondary VLAN and a primary VLAN.
community Designate the VLAN as a community VLAN.
isolated Designate the VLAN as a community VLAN.
primary Designate the VLAN as a community VLAN.
Release Modification
12.2(53)SE2 This command was introduced.