Configuring Private VLAN's

Create the VLAN's:

vlan 104
 name PRIVATE_VLAN_PRIMARY
  private-vlan primary
  private-vlan association 114,124,134
!
vlan 114
 name ISOLATED
  private-vlan isolated
!
vlan 124
 name COMMUNITY_1
  private-vlan community
!
vlan 134
 name COMMUNITY_2
  private-vlan community


Apply the Isolated and Community Private VLAN's:

interface G1/0/1
 description ISOLATED Interface 1
 switchport private-vlan host-association 104 114
 switchport mode private-vlan host
!
interface G1/0/2
 description ISOLATED Interface 2
 switchport private-vlan host-association 104 114
 switchport mode private-vlan host
!
interface G1/0/3
 description COMMUNITY Interface Community 1
 switchport private-vlan host-association 104 124
 switchport mode private-vlan host
!
interface G1/0/4
 description COMMUNITY Interface Community 1
 switchport private-vlan host-association 104 124
 switchport mode private-vlan host
!
interface G1/0/5
 description COMMUNITY Interface Community 2
 switchport private-vlan host-association 104 134
 switchport mode private-vlan host
!
interface G1/0/6
 description COMMUNITY Interface Community 2
 switchport private-vlan host-association 104 134
 switchport mode private-vlan host


Creat a Promiscuous Port for an Exit Interface:

interface G1/1/1
 description PRIVATE VLAN EXIT
 switchport private-vlan mapping 104 114,124,134
 switchport mode private-vlan promiscuous