Private VLAN

• Isolated - all devices in VLAN can’t access each other

• Community - all devices in VLAN can access each other, but not isolated port

• Promiscuous - can be accessed from isolated/community

vtp mode transparent

vlan 200
	private-vlan primary
	private-vlan association 205,210
	
vlan 205
	private-vlan community

vlan 210
	private-vlan isolated
	
show vlan private-vlan type
	
int fa1/0/2
	switchport private-vlan host-association 200 205
	
int fa1/0/1
	switchport mode private-vlan promiscous 
	switchport private-vlan mapping 200 205,210