Configuration Example for Implicit Dual-Mode PVLAN Network

To configure the implicit dual-mode PVLAN network, enter the following commands.

device(config)# vlan 101
device(config-vlan-101)# pvlan type isolated 
device(config-vlan-101)# tagged ethernet 1/1/25 ethernet 1/1/35
ports ethe 1/1/25 ethe 1/1/35  are removed from default VLAN 3999 to add to Private VLAN 101 
Added tagged port(s) ethe 1/1/25 ethe 1/1/35 to port-vlan 101.
device(config-vlan-101)# spanning-tree 
device(config-vlan-101)# exit

device(config)# vlan 102
device(config-vlan-102)# pvlan type community
device(config-vlan-102)# spanning-tree 
device(config-vlan-102)# exit

device(config)# vlan 103
device(config-vlan-103)# pvlan type community 
device(config-vlan-103)# spanning-tree 
device(config-vlan-103)# exit

device(config)# vlan 100
device(config-vlan-100)# pvlan type primary 
device(config-vlan-100)# tagged ethernet 1/1/20
ports ethe 1/1/20  are removed from default VLAN 3999 to add to Private VLAN 100 
Added tagged port(s) ethe 1/1/20 to port-vlan 100.
device(config-vlan-100)# tag ethernet 1/1/21 e 1/1/31
ports ethe 1/1/21 ethe 1/1/31  are removed from default VLAN 3999 to add to Private VLAN 100 
device(config-vlan-100)# pvlan mapping 101 ethernet 1/1/20
device(config-vlan-100)# pvlan mapping 103 ethernet 1/1/20
device(config-vlan-100)# pvlan pvlan-trunk 102 ethernet 1/1/21 ethernet 1/1/31
device(config-vlan-100)# pvlan pvlan-trunk 101 ethernet 1/1/21 ethernet 1/1/31
device(config-vlan-100)# pvlan pvlan-trunk 103 ethernet 1/1/21 ethernet 1/1/31
device(config-vlan-100)# spanning-tree 
device(config-vlan-100)# exit

device(config)# vlan 201
device(config-vlan-201)# untagged ethernet 1/1/25 ethernet 1/1/35
Added untagged port(s) ethe 1/1/25 ethe 1/1/35 to port-vlan 201
device(config-vlan-201)# pvlan type isolated
device(config-vlan-201)# spanning-tree 
device(config-vlan-201)# exit

device(config)# vlan 202
device(config-vlan-202)# pvlan type community
device(config-vlan-202)# spanning-tree 
device(config-vlan-202)# exit

device(config)# vlan 203
device(config-vlan-203)# pvlan type community
device(config-vlan-203)# spanning-tree       
device(config-vlan-203)# exit

device(config)# vlan 200
device(config-vlan-200)# pvlan type primary
device(config-vlan-200)# untagged ethernet 1/1/20
Added untagged port(s) ethe 1/1/20 to port-vlan 200.
device(config-vlan-200)# tagged e 1/1/21 e 1/1/31
Added tagged port(s) ethe 1/1/21 ethe 1/1/31 to port-vlan 200.
device(config-vlan-200)# pvlan mapping 203 ethernet 1/1/20
device(config-vlan-200)# pvlan mapping 201 ethernet 1/1/20
device(config-vlan-200)# pvlan mapping 202 ethernet 1/1/20
device(config-vlan-200)# pvlan pvlan-trunk 203 ethernet 1/1/21 ethernet 1/1/31
device(config-vlan-200)# pvlan pvlan-trunk 201 ethernet 1/1/21 ethernet 1/1/31
device(config-vlan-200)# pvlan pvlan-trunk 202 ethernet 1/1/21 ethernet 1/1/31
device(config-vlan-200)# spanning-tree
device(config-vlan-200)# exit