Configuration task list

To configure the private VLAN feature, perform the following tasks:

1. Configure the primary VLAN.

2. Configure the secondary VLANs.

3. Configure the uplink and downlink ports:

   • Configure the uplink port (for example, the port connecting Device B to Device A in Figure 47):

     • When the port allows only one primary VLAN, configure the port as a promiscuous port of the primary VLAN. The promiscuous port can be automatically assigned to the primary VLAN and its associated secondary VLANs.

     • When the port allows multiple primary VLANs, configure the port as a trunk promiscuous port of the primary VLANs. The trunk promiscuous port can be automatically assigned to these primary VLANs and their associated secondary VLANs.

   • Configure a downlink port (for example, the port connecting Device B to a host in Figure 47) as a host port. The host port can be automatically assigned to the secondary VLAN and its associated primary VLAN.

   • If a downlink port allows multiple secondary VLANs, configure the port as a trunk secondary port. The trunk secondary port can be automatically assigned to the secondary VLANs and their associated primary VLANs.

   For more information about promiscuous, trunk promiscuous, host, and trunk secondary ports, see Layer 2—LAN Switching Command Reference.

4. Associate the secondary VLANs with the primary VLAN.

5. (Optional.) Configure Layer 3 communication between the specified secondary VLANs that are associated with the primary VLAN.