Private VLAN configuration:

vlan 300
private-vlan primary
private-vlan association 301-302
!
vlan 301
private-vlan isolated
!
vlan 302
private-vlan community

Port configuration:

interface GigabitEthernet1/0/1
	switchport private-vlan host-association 300 301
	switchport mode private-vlan host

What about the SVI?

interface Vlan300
	ip address 11.0.0.48 255.255.255.0

private-vlan mapping ?

	WORD Secondary VLAN IDs of the private VLAN SVI interface mapping
	add Add a VLAN to private VLAN list
	remove Remove a VLAN from private VLAN list

If we add a private-vlan mapping to the SVI it works like a promicuous port for all the secondary vlans mapped, reachable by both isolated and community ports:

private-vlan mapping 301-302