By default, the Private VLAN is disabled. To configure a PVLAN, follow these steps:

1. Create the secondary VLANs, i.e. isolated VLAN or community VLAN.
2. Create the primary VLAN.
3. Associate the secondary VLAN with the primary VLAN. (Only one isolated VLAN can be associated with a primary VLAN, but more than one community VLAN can be associated with a primary VLAN).
4. Configure the port connected to the host or the downlink devices as a PVLAN host port or secondary trunk port.
5. Configure the port connected to the uplink device as a PVLAN promiscuous port or promiscuous trunk port.
6. Add PVLAN ports to the private VLAN and set the native VLAN of the port as the private VLAN.
7. Verify PVLAN configurations.

Procedure

Step1         Create the secondary VLANs.

   set vlans vlan-id <vlan-id> private-vlan mode community

   set vlans vlan-id <vlan-id> private-vlan mode isolated

Step2         Create the primary VLAN.

   set vlans vlan-id <vlan-id> private-vlan mode primary

Step3         Associate the secondary VLAN with the primary VLAN.

   set vlans vlan-id <vlan-id> private-vlan association <secondary-vlan-list>

Step4         Configure the port connected to the uplink device as a promiscuous port or promiscuous trunk port.

   set interface gigabit-ethernet <interface-name> family ethernet-switching port-mode <port-mode>

Step5         Configure the port connected to the host or the downlink device as a host port or secondary trunk port.

   set interface gigabit-ethernet <interface-name> family ethernet-switching port-mode <port-mode>

Step6         Add the PVLAN ports to the private VLAN and set the native VLAN of the port as the private VLAN.

   set interface gigabit-ethernet <port> family ethernet-switching native-vlan-id <vlan-id>

Step7         Commit the configurations.

                   Commit