The following example shows the switchport mode private-vlan command on a port and on a port channel.Dell#confDell(conf)#interface TenGigabitEthernet 2/1Dell(conf-if-te-2/1)#switchport mode private-vlan promiscuousDell(conf)#interface TenGigabitEthernet 2/2Dell(conf-if-te-2/2)#switchport mode private-vlan hostDell(conf)#interface TenGigabitEthernet 2/3Dell(conf-if-te-2/3)#switchport mode private-vlan trunkDell(conf)#interface TenGigabitEthernet 2/2Dell(conf-if-te-2/2)#switchport mode private-vlan hostDell(conf)#interface port-channel 10Dell(conf-if-po-10)#switchport mode private-vlan promiscuousCreating a Primary VLANA primary VLAN is a port-based VLAN that is specifically enabled as a primary VLAN to contain the promiscuous ports and PVLANtrunk ports for the private VLAN.A primary VLAN also contains a mapping to secondary VLANs, which comprise community VLANs and isolated VLANs.1. Access INTERFACE VLAN mode for the VLAN to which you want to assign the PVLAN interfaces.CONFIGURATION modeinterface vlan vlan-id2. Enable the VLAN.INTERFACE VLAN modeno shutdown3. Set the PVLAN mode of the selected VLAN to primary.INTERFACE VLAN modeprivate-vlan mode primary4. Map secondary VLANs to the selected primary VLAN.INTERFACE VLAN modeprivate-vlan mapping secondary-vlan vlan-listThe list of secondary VLANs can be:• Specified in comma-delimited (VLAN-ID,VLAN-ID) or hyphenated-range format (VLAN-ID-VLAN-ID).• Specified with this command even before they have been created.• Amended by specifying the new secondary VLAN to be added to the list.5. Add promiscuous ports as tagged or untagged interfaces.INTERFACE VLAN modetagged interface or untagged interfaceAdd PVLAN trunk ports to the VLAN only as tagged interfaces.You can enter interfaces in numeric or in range format, either comma-delimited (slot/port,port,port) or hyphenated(slot/port-port).You can only add promiscuous ports or PVLAN trunk ports to the PVLAN (no host or regular ports).6. (OPTIONAL) Assign an IP address to the VLAN.INTERFACE VLAN mode662 Private VLANs (PVLAN)
