47-28
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
 
Chapter 47      Configuring Private VLANs
Configuring PVLANs
This example shows how to configure interface port channel 63 as a secondary trunk port, and to verify 
the configuration:
Switch# configure terminal 
Switch(config)# interface port-channel 63
Switch(config-if)# switchport mode private-vlan trunk secondary
Switch(config-if)# switchport private-vlan trunk native vlan 10
Switch(config-if)# switchport private-vlan trunk allowed vlan 10. 3-4
Switch(config-if)# switchport private-vlan association trunk 3 301
Switch(config-if)# end 
Switch# show interfaces port-channel 63 switchport
Name: Po63
Switchport: Enabled
Administrative Mode: private-vlan trunk secondary 
Operational Mode: private-vlan trunk secondary 
Administrative Trunking Encapsulation: negotiate 
Operational Trunking Encapsulation: dot1q 
Negotiation of Trunking: On 
Access Mode VLAN: 1 (default) 
Trunking Native Mode VLAN: 1 (default) 
Administrative Native VLAN tagging: enabled 
Voice VLAN: none 
Administrative private-vlan host-association: none 
Administrative private-vlan mapping: none 
Administrative private-vlan trunk native VLAN: 10 
Administrative private-vlan trunk Native VLAN tagging: enabled 
Administrative private-vlan trunk encapsulation: dot1q 
Administrative private-vlan trunk normal VLANs: none 
Administrative private-vlan trunk associations: 
    3 (VLAN0003) 301 (VLAN0301)
Administrative private-vlan trunk mappings: none 
Operational private-vlan: none 
Operational Normal VLANs: none 
Trunking VLANs Enabled: ALL 
Pruning VLANs Enabled: 2-1001 
Capture Mode Disabled Capture VLANs Allowed: ALL
Unknown unicast blocked: disabled
Unknown multicast blocked: disabled
Appliance trust: none
Configuring a Layer 2 Etherchannel as a Promiscuous PVLAN Trunk Port
To configure a Layer 2 Etherchannel as a promiscuous PVLAN trunk port, perform this task:
Command Purpose
Step 1
Switch# configure terminal 
Enters global configuration mode.
Step 2
Switch(config)# interface port-channel 
interface-number
Specifies the LAN interface to configure.
Step 3
Switch(config-if)# switchport mode private-vlan 
{host | promiscuous | trunk promiscuous | trunk 
[secondary]}
Configures a Layer 2 Etherchannel as a 
PVLAN promiscuous trunk port.
Step 4
Switch(config-if)# [no] switchport private-vlan 
mapping [trunk] primary_vlan_ID 
{secondary_vlan_list | add secondary_vlan_list 
| remove secondary_vlan_list}
Maps the promiscuous PVLAN port to a 
primary VLAN and to the selected secondary 
VLANs.
This command offers 3 levels of removal.