220
# Assign GigabitEthernet 1/0/2 to VLAN 4 and configure the port as a host port.
[Sysname] interface gigabitethernet 1/0/2
[Sysname-GigabitEthernet1/0/2] port access vlan 4
[Sysname-GigabitEthernet1/0/2] port private-vlan host
[Sysname-GigabitEthernet1/0/2] quit
# Assign GigabitEthernet 1/0/3 to VLAN 4 and configure the port as a host port.
[Sysname] interface gigabitethernet 1/0/3
[Sysname-GigabitEthernet1/0/3] port access vlan 4
[Sysname-GigabitEthernet1/0/3] port private-vlan host
# Configure port isolation at Layer 2 in secondary VLAN 4.
[Sysname] vlan 4
[Sysname-vlan4] private-vlan isolated
Related commands
• private-vlan (VLAN view)
• private-vlan community
• private-vlan primary
private-vlan primary
Use private-vlan primary to configure a VLAN as a primary VLAN.
Use undo private-vlan primary to restore the default.
Syntax
private-vlan primary
undo private-vlan primary
Default
A VLAN is not a primary VLAN.
Views
VLAN view
Predefined user roles
network-admin
Usage guidelines
The configuration synchronization is triggered based on the interface configuration when the
following conditions exist:
• This command is configured for a VLAN that has been associated with secondary VLANs.
• Ports on the device are promiscuous, trunk promiscuous, host, or trunk secondary ports.
For more information, see the port private-vlan host, port private-vlan promiscuous, or port
private-vlan trunk promiscuous, or port private-vlan trunk secondary command.
Examples
# Configure VLAN 5 as a primary VLAN.
<Sysname> system-view
[Sysname] vlan 5
[Sysname-vlan5] private-vlan primary