Cisco Catalyst 4500 Series Software Configuration Guide

47-8
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Chapter 47 Configuring Private VLANs
About Private VLANs
PVLAN Modes Over Gigabit Etherchannel
Beginning with Cisco IOS Release 15.0(2)SG you can configure PVLAN modes over Etherchannel.
These new modes are:
• Host mode - Isolated, Community and 2-way community
• Promiscuous mode
• Secondary Isolated trunks
• Promiscuous trunks
The process of bundling ports has not changed. PVLAN modes are added to already existing modes such
as access, trunk, routed, tunneled etc.
Feature interactions include:
• A primary VLAN can be associated with multiple community and twoway-community VLANs, but
only one isolated VLAN.
• An isolated or community VLAN or 2-way community VLAN can be associated with only one
primary VLAN.
• If you delete a VLAN used in a PVLAN configuration, the PVLAN ports associated with the VLAN
become inactive.
• The default native VLAN for promiscuous trunk port is VLAN 1 (management VLAN). All
untagged packets are forwarded in the native VLAN. Either the primary VLANs or a regular VLAN
can be configured as the native VLAN.
• No default native VLAN set exists on an isolated secondary trunks. All untagged packets are
dropped, if no native VLAN is configured.
• Community and twoway-community VLANs cannot be propagated or carried over PVLAN trunks.
• For IGMP Snooping, IGMP reports are learned on the primary VLAN and the platform decides if
packet must be forwarded in the primary or secondary VLANs.
For details on configuring PVLANs over EtherChannel, Refer to the section “Configuring PVLAN over
EtherChannel” section on page 47-24.
Private-VLAN Interaction with Other Features
PVLANs have specific interaction with some other features, described in these sections:
• PVLANs and VLAN ACL/QoS, page 47-8
• PVLANs and Unicast, Broadcast, and Multicast Traffic, page 47-9
• PVLANs and SVIs, page 47-10
• Per-Virtual Port Error-Disable on PVLANs, page 47-10
For details, see the section “PVLAN Configuration Guidelines and Restrictions” on page 12.
PVLANs and VLAN ACL/QoS
PVLAN ports use primary and secondary VLANs, as follows:
• A packet received on a PVLAN host port belongs to the secondary VLAN.

Cisco Catalyst 4500 Series Specifications

General

Series	Catalyst 4500 Series
Category	Switch
Layer Support	Layer 2, Layer 3
Form Factor	Modular chassis
Stackable	No
Chassis Slots	3, 6, 7, 10
Power Supply Options	AC, DC
Redundancy	Power supply, Supervisor engine
Network Management	Cisco IOS Software CLI, SNMP, Cisco Prime Infrastructure
Features	Security, QoS
Port Density	Up to 384 ports per chassis
Security Features	802.1X, ACLs, DHCP Snooping, Dynamic ARP Inspection, IP Source Guard
Supervisor Engine	8-E