You would put the IP address on the primary VLAN SVI. Interface vlan2 private-VLAN mapping 3,5,7 ip address x.x.x.x x.x.x.x I would suggest running VTPv3 which supports pvlans. That way all switches will have that private VLAN added on them. Further having different pvlan per switch is not needed, especially since they are isolated. Think, 1 primary VLAN, 1 isolated VLAN and 1 VLAN per pvlan community.