7. (OPTIONAL) Enable/disable Layer 3 communication between secondary VLANs.INTERFACE VLAN modeip local-proxy-arpNOTE: If a promiscuous or host port is untagged in a VLAN and it receives a tagged packet in the same VLAN, the packetis NOT dropped.Creating a Community VLANA community VLAN is a secondary VLAN of the primary VLAN in a private VLAN.The ports in a community VLAN can talk to each other and with the promiscuous ports in the primary VLAN.1. Access INTERFACE VLAN mode for the VLAN that you want to make a community VLAN.CONFIGURATION modeinterface vlan vlan-id2. Enable the VLAN.INTERFACE VLAN modeno shutdown3. Set the PVLAN mode of the selected VLAN to community.INTERFACE VLAN modeprivate-vlan mode community4. Add one or more host ports to the VLAN.INTERFACE VLAN modetagged interface or untagged interfaceYou can enter the interfaces singly or in range format, either comma-delimited (slot/port,port,port) or hyphenated(slot/ port-port).You can only add host (isolated) ports to the VLAN.Creating an Isolated VLANAn isolated VLAN is a secondary VLAN of a primary VLAN.An isolated VLAN port can only talk with the promiscuous ports in that primary VLAN.1. Access INTERFACE VLAN mode for the VLAN that you want to make an isolated VLAN.CONFIGURATION modeinterface vlan vlan-id2. Enable the VLAN.INTERFACE VLAN modeno shutdown3. Set the PVLAN mode of the selected VLAN to isolated.INTERFACE VLAN modeprivate-vlan mode isolated4. Add one or more host ports to the VLAN.INTERFACE VLAN modePrivate VLANs (PVLAN) 563
