Add PVLAN trunk ports to the VLAN only as tagged interfaces.You can enter interfaces in numeric or in range format, either comma-delimited (slot/port,port,port) or hyphenated (slot/port-port).You can only add promiscuous ports or PVLAN trunk ports to the PVLAN (no host or regular ports).6 (OPTIONAL) Assign an IP address to the VLAN.INTERFACE VLAN modeip address ip address7 (OPTIONAL) Enable/disable Layer 3 communication between secondary VLANs.INTERFACE VLAN modeip local-proxy-arpNOTE: If a promiscuous or host port is untagged in a VLAN and it receives a tagged packet in the same VLAN, the packet is NOTdropped.Creating a Community VLANA community VLAN is a secondary VLAN of the primary VLAN in a private VLAN.The ports in a community VLAN can talk to each other and with the promiscuous ports in the primary VLAN.1 Access INTERFACE VLAN mode for the VLAN that you want to make a community VLAN.CONFIGURATION modeinterface vlan vlan-id2 Enable the VLAN.INTERFACE VLAN modeno shutdown3 Set the PVLAN mode of the selected VLAN to community.INTERFACE VLAN modeprivate-vlan mode community4 Add one or more host ports to the VLAN.INTERFACE VLAN modetagged interface or untagged interfaceYou can enter the interfaces singly or in range format, either comma-delimited (slot/port,port,port) or hyphenated (slot/port-port).You can only add host (isolated) ports to the VLAN.Creating an Isolated VLANAn isolated VLAN is a secondary VLAN of a primary VLAN.An isolated VLAN port can only talk with the promiscuous ports in that primary VLAN.1 Access INTERFACE VLAN mode for the VLAN that you want to make an isolated VLAN.CONFIGURATION mode680 Private VLANs (PVLAN)
