Cisco private vlan study

vlan 10
private-vlan primary
private-vlan association 20,30

vlan 20
private-vlan community

vlan 30
private-vlan isolated

interface fa 0/1
switchport mode private-vlan promiscuous
switchport private-vlan mapping 10 20,30

interface fa 0/3
switchport mode private-vlan host
switchport private-vlan host-association 10 20

interface fa 0/5
switchport mode private-vlan host
switchport private-vlan host-association 10 30



# private vlan from wikipedia
Private VLAN divides a VLAN (Primary) into sub-VLANs (Secondary) while keeping existing IP subnet and layer 3configuration. A regular VLAN is a single broadcast domain, while private VLAN partitions one broadcast domain into multiple smaller broadcast subdomains.

http://en.wikipedia.org/wiki/Private_VLAN

Only one Isolated VLAN is allowed in one Private VLAN domain.

P port = promiscous port
I port = isolated port
C port = community port