switchport private-vlan

This command defines a private-VLAN association for an isolated or community port or a mapping for a promiscuous port.

Format	`switchport private-vlan {host-association primary-vlan-id secondary-vlan-id \| mapping primary-vlan-id {add \| remove} secondary-vlan-list \| mapping trunk primary-vlan-id {secondary-vlan-list \| add secondary-vlan-list \| remove secondary-vlan-list} \| trunk {native vlan vlan-id \| allowed vlan vlan-list}} \| association trunk primary-vlan-id secondary-vlan-id}`
Mode	Interface Config

Parameter	Description
host-association	Defines the VLAN association for community or host ports.
mapping	Defines the private VLAN mapping for promiscuous ports.
mapping trunk	Maps the port to a primary VLAN and selected secondary VLANs.
primary-vlan-id	Primary VLAN ID of a private VLAN.
secondary-vlan-id	Secondary (isolated or community) VLAN ID of a private VLAN.
add	Associates the secondary VLAN with the primary one.
remove	Deletes the secondary VLANs from the primary VLAN association.
secondary-vlan-list	A list of secondary VLANs to be mapped to a primary VLAN.
trunk native vlan	Defines the VLAN association for untagged packets. If not configured, untagged packets are dropped.
trunk allowed vlan	Specifies the list of allowed normal VLANs on the trunk port.
association trunk	Associates a primary VLAN with a secondary (isolated only) VLAN. Multiple private VLAN pairs can be configured using this command.