Cisco Catalyst 4500 Series - Configuring a Layer 2 Interface as a PVLAN Promiscuous Port

47-17
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Chapter 47 Configuring Private VLANs
Configuring PVLANs
Switch# configure terminal
Switch(config)# vlan 202
Switch(config-vlan)# private-vlan association 303-307,309,440
Switch(config-vlan)# end
Switch# show vlan private-vlan
Primary Secondary Type Interfaces
------- --------- ----------------- ------------------------------------------
202 303 community
202 304 community
202 305 community
202 306 community
202 307 community
202 309 community
202 440 isolated
202 550 twoway-community
202 551 twoway-community
202 552 twoway-community
308 community
Note The secondary VLAN 308 has no associated primary VLAN.
Configuring a Layer 2 Interface as a PVLAN Promiscuous Port
To configure a Layer 2 interface as a PVLAN promiscuous port, perform this task:
Note The maximum number of unique PVLAN pairs supported by the switchport private-vlan mapping
command is 1000.
When you configure a Layer 2 interface as a PVLAN promiscuous port, note the following:
• The secondary_vlan_list parameter cannot contain spaces. It can contain multiple comma-separated
items. Each item can be a single PVLAN ID or a hyphenated range of PVLAN IDs.
• Enter a secondary_vlan_list or use the add keyword with a secondary_vlan_list to map the
secondary VLANs to the PVLAN promiscuous port.
Command Purpose
Step 1
Switch# configure terminal
Enters global configuration mode.
Step 2
Switch(config)# interface {fastethernet |
gigabitethernet | tengigabitethernet} slot/port
Specifies the LAN interface to configure.
Step 3
Switch(config-if)# switchport mode private-vlan
{host | promiscuous | trunk promiscuous | trunk
[secondary]}
Configures a Layer 2 interface as a PVLAN promiscuous
port.
Step 4
Switch(config-if)# [no] switchport private-vlan
mapping [trunk] primary_vlan_ID
{secondary_vlan_list | add secondary_vlan_list |
remove secondary_vlan_list}
Maps the PVLAN promiscuous port to a primary VLAN
and to selected secondary VLANs.
Step 5
Switch(config-if)# end
Exits configuration mode.
Step 6
Switch# show interfaces {fastethernet |
gigabitethernet | tengigabitethernet} slot/port
switchport
Verifies the configuration.