47-21
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
 
Chapter 47      Configuring Private VLANs
Configuring PVLANs
Trunking Native Mode VLAN: 1 (default) 
Administrative Native VLAN tagging: enabled 
Voice VLAN: none 
Administrative private-vlan host-association: none A
Administrative private-vlan mapping: none 
Administrative private-vlan trunk native VLAN: 10 
Administrative private-vlan trunk Native VLAN tagging: enabled 
Administrative private-vlan trunk encapsulation: dot1q 
Administrative private-vlan trunk normal VLANs: none 
Administrative private-vlan trunk associations: 
    3 (VLAN0003) 301 (VLAN0301)
Administrative private-vlan trunk mappings: none 
Operational private-vlan: none 
Operational Normal VLANs: none 
Trunking VLANs Enabled: ALL 
Pruning VLANs Enabled: 2-1001 
Capture Mode Disabled Capture VLANs Allowed: ALL
Unknown unicast blocked: disabled
Unknown multicast blocked: disabled
Appliance trust: none
Configuring a Layer 2 Interface as a Promiscuous PVLAN Trunk Port
To configure a Layer 2 interface as a promiscuous PVLAN trunk port, perform this task:
Note The maximum number of unique PVLAN pairs supported by the 
switchport private-vlan mapping trunk command is 500. For example, 500 isolated secondary 
VLANs could map to 500 primary VLANs, because only one isolated VLAN association per primary 
VLAN is supported. Or, 500 community secondary VLANs could map to one primary VLAN. Or, 250 
community secondary VLANs could map to 1 primary VLAN, and another 250 community secondary 
VLANs could map to another primary VLAN for a total of 500 pairs.
Note By default, when you configure the mode to PVLAN trunk promiscuous, the native VLAN is set to 1.
Command Purpose
Step 1
Switch# configure terminal 
Enters global configuration mode.
Step 2
Switch(config)# interface {fastethernet | 
gigabitethernet | tengigabitethernet} slot/port 
Specifies the LAN interface to configure.
Step 3
Switch(config-if)# switchport mode private-vlan {host 
| promiscuous | trunk promiscuous | trunk [secondary]}
Configures a Layer 2 interface as a PVLAN 
promiscuous trunk port.
Step 4
Switch(config-if)# [no] switchport private-vlan 
mapping [trunk] primary_vlan_ID {secondary_vlan_list | 
add secondary_vlan_list | remove secondary_vlan_list}
Maps the promiscuous PVLAN port to a primary 
VLAN and to selected secondary VLANs.
This command offers 3 levels of removal. See the 
examples that follow this table.
Step 5
Switch(config-if)# end 
Exits configuration mode.
Step 6
Switch# show interfaces {fastethernet | 
gigabitethernet | tengigabitethernet} slot/port 
switchport 
Verifies the configuration.