Cisco Catalyst 4500 Series Configuration Guide

42-11
Software Configuration Guide—Release IOS XE 3.3.0SG and IOS 15.1(1)SG
OL-25340-01
Chapter 42 Configuring Private VLANs
Configuring PVLANs
Configuring PVLANs
These sections describe how to configure PVLANs:
• Basic PVLAN Configuration Procedure, page 42-12
• Default Private-VLAN Configuration, page 42-12
• PVLAN Configuration Guidelines and Restrictions, page 42-12
• Configuring a VLAN as a PVLAN, page 42-15
• Associating a Secondary VLAN with a Primary VLAN, page 42-16
• Configuring a Layer 2 Interface as a PVLAN Promiscuous Port, page 42-17
• Configuring a Layer 2 Interface as a PVLAN Host Port, page 42-18
show interface private-vlan mapping Verifies the configuration. Permitting Routing of Secondary
VLAN Ingress Traffic, page 42-23
switchport mode private-vlan {host |
promiscuous | trunk promiscuous |
trunk [secondary]}
Configures a Layer 2 interface as a
PVLAN port.
Configuring PVLANs, page 42-11
switchport private-vlan mapping
[trunk] primary_vlan_ID
{secondary_vlan_list | add
secondary_vlan_list | remove
secondary_vlan_list}
Maps the PVLAN promiscuous port
to a primary VLAN and to selected
secondary VLANs.
Configuring a Layer 2 Interface as a
PVLAN Promiscuous Port,
page 42-17
Configuring a Layer 2 Interface as a
Promiscuous PVLAN Trunk Port,
page 42-21
Switch(config-if)# switchport
private-vlan host-association
primary_vlan_ID secondary_vlan_ID
Associates the Layer 2 interface with
a PVLAN.
Note You can associate only one
primary-secondary VLAN
pair to the isolated port.
Configuring a Layer 2 Interface as a
PVLAN Host Port, page 42-18
switchport private-vlan association
trunk primary_vlan_ID
secondary_vlan_ID
Configures association between
primary VLANs and secondary
VLANs the PVLAN trunk port with a
PVLAN.
Note You can configure the
isolated trunk port with
multiple primary-secondary
pair.
Configuring a Layer 2 Interface as an
Isolated PVLAN Trunk Port,
page 42-19
switchport private-vlan trunk allowed
vlan vlan_list all | none | [add | remove
| except] vlan_atom[,vlan_atom...]
Configures a list of allowed normal
VLANs on a PVLAN trunk port.
Configuring a Layer 2 Interface as an
Isolated PVLAN Trunk Port,
page 42-19
switchport private-vlan trunk native
vlan vlan_id
Configures a VLAN to which
untagged packets (as in IEEE 802.1Q
tagging) are assigned on a PVLAN
trunk port.
Configuring a Layer 2 Interface as an
Isolated PVLAN Trunk Port,
page 42-19
Command Purpose Location

Cisco Catalyst 4500 Series Specifications

General

Series	Catalyst 4500 Series
Category	Switch
Layer Support	Layer 2, Layer 3
Form Factor	Modular chassis
Stackable	No
Chassis Slots	3, 6, 7, 10
Power Supply Options	AC, DC
Redundancy	Power supply, Supervisor engine
Network Management	Cisco IOS Software CLI, SNMP, Cisco Prime Infrastructure
Features	Security, QoS
Port Density	Up to 384 ports per chassis
Security Features	802.1X, ACLs, DHCP Snooping, Dynamic ARP Inspection, IP Source Guard
Supervisor Engine	8-E