Asus GigaX2024SX - Manual (Page 329)

4-161
to a secondary VLAN.
5. Use the switchport private-vlan mapping command to assign a port to a
primary VLAN.
6. Use the show vlan private-vlan command to verify your configuration settings.
private-vlan Use this command to create a primary, isolated or community
private VLAN. Use the no form to remove the specified private VLAN.
Syntax
private-vlan vlan-id {community | primary | isolated}
no private-vlan vlan-id
• vlan-id - ID of private VLAN. (Range: 1-4094, no leading zeroes).
• community – Specifies a community VLAN.
• primary – Specifies a primary VLAN.
• isolated – Specifies an isolated VLAN.
Default Setting
None
Command Mode
VLAN Configuration
Command Usage
• Private VLANs are used to restrict traffic to ports within the same
VLAN“ community,” and channel traffic passing outside the community through
promiscuous ports that have been mapped to the associated “primary” VLAN.
• Port member ship for private VLANs is static. Once a port has been assigned to
a private VLAN, it cannot be dynamically moved to another VLAN via GVRP.
• Private VLAN ports cannot be set to trunked mode. (See “switchport mode” on
page 4-202.)
Example