By default, the Private VLAN is disabled. To configure a PVLAN, follow these steps:

Create the secondary VLANs, i.e. isolated VLAN or community VLAN.
Create the primary VLAN.
Associate the secondary VLAN with the primary VLAN. (Only one isolated VLAN can be associated with a primary VLAN, but more than one community VLAN can be associated with a primary VLAN).
Configure the port connected to the host or the downlink devices as a PVLAN host port or secondary trunk port.
Configure the port connected to the uplink device as a PVLAN promiscuous port or promiscuous trunk port.
Add PVLAN ports to the private VLAN and set the native VLAN of the port as the private VLAN.
Verify PVLAN configurations.

Procedure

Step1 Create the secondary VLANs.

set vlans vlan-id <vlan-id> private-vlan mode community

set vlans vlan-id <vlan-id> private-vlan mode isolated

Step2 Create the primary VLAN.

set vlans vlan-id <vlan-id> private-vlan mode primary

Step3 Associate the secondary VLAN with the primary VLAN.

set vlans vlan-id <vlan-id> private-vlan association <secondary-vlan-list>

Step4 Configure the port connected to the uplink device as a promiscuous port or promiscuous trunk port.

set interface gigabit-ethernet <interface-name> family ethernet-switching port-mode <port-mode>

Step5 Configure the port connected to the host or the downlink device as a host port or secondary trunk port.

set interface gigabit-ethernet <interface-name> family ethernet-switching port-mode <port-mode>

Step6 Add the PVLAN ports to the private VLAN and set the native VLAN of the port as the private VLAN.

set interface gigabit-ethernet <port> family ethernet-switching native-vlan-id <vlan-id>

Step7 Commit the configurations.

Commit

Configuring PVLAN