Cisco Catalyst 4500 Series - Configuring Pvlans

47-11
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Chapter 47 Configuring Private VLANs
Configuring PVLANs
Configuring PVLANs
These sections describe how to configure PVLANs:
• Basic PVLAN Configuration Procedure, page 47-12
• Default Private-VLAN Configuration, page 47-12
• PVLAN Configuration Guidelines and Restrictions, page 47-12
• Configuring a VLAN as a PVLAN, page 47-15
• Associating a Secondary VLAN with a Primary VLAN, page 47-16
• Configuring a Layer 2 Interface as a PVLAN Promiscuous Port, page 47-17
• Configuring a Layer 2 Interface as a PVLAN Host Port, page 47-18
show interface private-vlan mapping Verifies the configuration. Permitting Routing of Secondary
VLAN Ingress Traffic, page 47-23
switchport mode private-vlan {host |
promiscuous | trunk promiscuous |
trunk [secondary]}
Configures a Layer 2 interface as a
PVLAN port.
Configuring PVLANs, page 47-11
switchport private-vlan mapping
[trunk] primary_vlan_ID
{secondary_vlan_list | add
secondary_vlan_list | remove
secondary_vlan_list}
Maps the PVLAN promiscuous port
to a primary VLAN and to selected
secondary VLANs.
Configuring a Layer 2 Interface as a
PVLAN Promiscuous Port,
page 47-17
Configuring a Layer 2 Interface as a
Promiscuous PVLAN Trunk Port,
page 47-21
Switch(config-if)# switchport
private-vlan host-association
primary_vlan_ID secondary_vlan_ID
Associates the Layer 2 interface with
a PVLAN.
Note You can associate only one
primary-secondary VLAN
pair to the isolated port.
Configuring a Layer 2 Interface as a
PVLAN Host Port, page 47-18
switchport private-vlan association
trunk primary_vlan_ID
secondary_vlan_ID
Configures association between
primary VLANs and secondary
VLANs the PVLAN trunk port with a
PVLAN.
Note You can configure the
isolated trunk port with
multiple primary-secondary
pair.
Configuring a Layer 2 Interface as an
Isolated PVLAN Trunk Port,
page 47-19
switchport private-vlan trunk allowed
vlan vlan_list all | none | [add | remove
| except] vlan_atom[,vlan_atom...]
Configures a list of allowed normal
VLANs on a PVLAN trunk port.
Configuring a Layer 2 Interface as an
Isolated PVLAN Trunk Port,
page 47-19
switchport private-vlan trunk native
vlan vlan_id
Configures a VLAN to which
untagged packets (as in IEEE 802.1Q
tagging) are assigned on a PVLAN
trunk port.
Configuring a Layer 2 Interface as an
Isolated PVLAN Trunk Port,
page 47-19
Command Purpose Location