This command configures a port as a promiscuous or host private VLAN port. Note that the properties of each mode can be configured even when the switch is not in that mode. However, they will only be applicable once the switch is in that particular mode.
| Default | general |
| Format | switchport mode private-vlan {host | promiscuous | trunk promiscuous | trunk secondary} |
| Mode | Interface Config |
| Parameter | Description |
|---|---|
| host | Configures an interface as a private VLAN host port. It can be either isolated or community port depending on the secondary VLAN it is associated with. |
| promiscuous | Configures an interface as a private VLAN promiscuous port. The promiscuous ports are members of the primary VLAN. |
| trunk promiscuous | Configures an interface as a private VLAN promiscuous trunk port. These ports can carry traffic of several primary VLANs and normal VLANs. An endpoint connected to a promiscuous trunk port is allowed to communicate with all the endpoints within the private VLAN and also with other ports participating in normal VLANs. These ports carry the traffic of multiple primary VLANs towards the upstream router and regular VLANs. Promiscuous trunk ports are used when it is required to reduce the number of links connected to upstream devices while still being able to manage all the endpoints in a private VLAN- in addition to carrying traffic of normal VLANs. These ports are typically used where the switches are connected to upstream devices that do not understand private VLANs. |
| trunk secondary | Configures an interface as a private VLAN isolated trunk port. These ports can carry traffic of several secondary VLANs and normal VLANs. |
