Private vlan




  1. Assign Linux2 in isolated vlan 200.
  2. Assign Linux 3 and 4 in community vlan 300.
  3. Assign e0/0 of Sw in promiscuous vlan 100.

Change VTP mode to transparent

Switch(config)#vtp mode transparent
Setting device to VTP Transparent mode for VLANS.

Create vlan and assign them to isolated and community

Switch(config)#vlan 200
Switch(config-vlan)#private-vlan isolated
Switch(config-vlan)#vlan 300
Switch(config-vlan)#private-vlan community

Create vlan 100 and assign as primary and associate secondary vlans to it

Switch(config)#vlan 100
Switch(config-vlan)#private-vlan primary 
Switch(config-vlan)#private-vlan association 200,300

Assign vlan isolated vlan and community vlan

Switch(config)#int e1/0
Switch(config-if)#switchport mode private-vlan host
Switch(config-if)#switchport private-vlan host-association 100 200
Switch(config)#int range e2/0, e3/0
Switch(config-if-range)#switchport mode private-vlan host
Switch(config-if-range)#switchport private-vlan host-association 100 300

Assign e0/0 of Sw to promiscuous

Switch(config)#int e0/0
Switch(config-if)#switchport mode private-vlan promiscuous
Switch(config-if)#switchport private-vlan mapping 100 200,300

Additional task: Configure two e1/1 and e1/2 to be protected ports
Host connected to the same vlan cannot communicate with each other that has protected ports, protected ports to non-protected ports have normal communication.

Switch(config)#int range e1/1-2
Switch(config-if-range)#switchport protected

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s