创建Secondary VLAN 2、3、6、8。

[DeviceB] vlan 2 to 3
[DeviceB] vlan 6
[DeviceB-vlan6] quit
[DeviceB] vlan 8
[DeviceB-vlan8] quit

配置上行端口 GigabitEthernet1/0/1 在VLAN 5 和VLAN 10 中工作在trunk promiscuous 模

式。
[DeviceB] interface gigabitethernet 1/0/1
[DeviceB- GigabitEthernet1/0/1] port private-vlan 5 10 trunk promiscuous
[DeviceB- GigabitEthernet1/0/1] quit

将下行端口 GigabitEthernet1/0/2 加入VLAN 2， GigabitEthernet1/0/3 加入VLAN 3，并

配置他们工作在host 模式。
[DeviceB] interface gigabitethernet 1/0/2
[DeviceB- GigabitEthernet1/0/2] port access vlan 2

[DeviceB- GigabitEthernet1/0/2] port private-vlan host
[DeviceB- GigabitEthernet1/0/2] quit
[DeviceB] interface ten-gigabitethernet 1/0/3
[DeviceB- GigabitEthernet1/0/3] port access vlan 3
[DeviceB- GigabitEthernet1/0/3] port private-vlan host
[DeviceB- GigabitEthernet1/0/3] quit

配置Primary VLAN 5 和Secondary VLAN 2、3 间的映射关系。

[DeviceB] vlan 5
[DeviceB-vlan5] private-vlan secondary 2 to 3
[DeviceB-vlan5] quit

将下行端口 GigabitEthernet1/0/6 加入VLAN 6， GigabitEthernet1/0/8 加入VLAN 8，并

配置它们工作在host 模式。
[DeviceB] interface gigabitethernet 1/0/6
[DeviceB- GigabitEthernet1/0/6] port access vlan 6
[DeviceB- GigabitEthernet1/0/6] port private-vlan host
[DeviceB- GigabitEthernet1/0/6] quit
[DeviceB] interface gigabitethernet 1/0/8
[DeviceB- GigabitEthernet1/0/8] port access vlan 8
[DeviceB- GigabitEthernet1/0/8] port private-vlan host
[DeviceB- GigabitEthernet1/0/8] quit

配置Primary VLAN 10 和Secondary VLAN 6、8 间的映射关系。

[DeviceB] vlan 10
[DeviceB-vlan10] private-vlan secondary 6 8
[DeviceB-vlan10] quit

(2) 配置Device A

创建VLAN 5 和VLAN 10。

[DeviceA] vlan 5
[DeviceA-vlan5] quit
[DeviceA] vlan 10
[DeviceA-vlan10] quit

配置端口 GigabitEthernet1/0/1 为Hybrid 端口，并允许VLAN 5 和VLAN 10 携带Tag 通过。

[DeviceA] interface gigabitethernet 1/0/1
[DeviceA- GigabitEthernet1/0/1] port link-type hybrid
[DeviceA- GigabitEthernet1/0/1] port hybrid vlan 5 10 tagged
[DeviceA- GigabitEthernet1/0/1] quit

配置vlan11的命令

原文：https://blog.51cto.com/14219792/2368316