private-vlan isolated
Use private-vlan isolated to isolate ports in a secondary VLAN at Layer 2.
Use undo private-vlan isolated to restore the default.
Syntax
private-vlan isolated
undo private-vlan isolated
Default
Ports in the same secondary VLAN can communicate with each other at Layer 2.
Views
VLAN view
Predefined user roles
network-admin
Usage guidelines
This command takes effect when the following conditions exist:
The secondary VLAN is associated with a primary VLAN.
The ports are configured as host ports or trunk secondary ports of the secondary VLAN.
This command is mutually exclusive with the primary VLAN, super VLAN, and sub-VLAN configuration commands.
Examples
This example shows how to meet the following requirements:
VLAN 4 is a secondary VLAN, and it is associated with primary VLAN 2.
is a promiscuous port of VLAN 2.
and are host ports.
and are isolated at Layer 2 in secondary VLAN 4.
# Configure VLAN 2 as a primary VLAN and associate it with secondary VLAN 4.
<Sysname> system-view [Sysname] vlan 4 [Sysname-vlan4] quit [Sysname] vlan 2 [Sysname-vlan2] private-vlan primary [Sysname-vlan2] private-vlan secondary 4 [Sysname-vlan2] quit
# Configure as a promiscuous port of VLAN 2.
[Sysname] interface [Sysname-] port private-vlan 2 promiscuous [Sysname-] quit
# Assign to VLAN 4 and configure the port as a host port.
[Sysname] interface [Sysname-] port access vlan 4 [Sysname-] quit [Sysname-] port private-vlan host
# Assign to VLAN 4 and configure the port as a host port.
[Sysname] interface [Sysname-] port access vlan 4 [Sysname-] port private-vlan host
# Configure port isolation at Layer 2 in secondary VLAN 4.
[Sysname] vlan 4 [Sysname-vlan4] private-vlan isolated
Related commands
private-vlan (VLAN view)
private-vlan community
private-vlan primary