170 G8264 Application Guide for ENOS 8.4Configuration GuidelinesThe following guidelines apply when configuring Private VLANs: Management VLANs cannot be Private VLANs. Management ports cannot bemembers of a Private VLAN. The default VLAN 1 cannot be a Private VLAN. IGMP Snooping must be disabled on Private VLANs. All VLANs that comprise the Private VLAN must belong to the same SpanningTree Group. A VLAN pair consists of a primary VLAN and one associated secondary VLAN(isolated or community). The maximum number of VLAN pairs per port is 16.Configuration ExampleFollow this procedure to configure a Private VLAN.1. Select a VLAN and define the Private VLAN type as primary.2. Configure a promiscuous port for VLAN 700.3. Configure two secondary VLANs: isolated VLAN and community VLAN.4. Map secondary VLANs to primary VLAN.RS G8264(config)# vlan 700RS G8264(config vlan)# private vlan primaryRS G8264(config vlan)# exitRS G8264(config)# interface port 1RS G8264(config if)# switchport mode private vlanRS G8264(config if)# switchport private vlan mapping 700RS G8264(config if)# exitRS G8264(config)# vlan 701RS G8264(config vlan)# private vlan isolatedRS G8264(config vlan)# exitRS G8264(config)# vlan 702RS G8264(config vlan)# private vlan communityRS G8264(config vlan)# exitRS G8264(config)# vlan 700 702RS G8264(config vlan)# stg 1RS G8264(config vlan)# exitRS G8264(config)# vlan 700RS G8264(config vlan)# private vlan association 701,702RS G8264(config vlan)# exit
