Cisco Catalyst 4500 Series Configuration Guide

42-16
Software Configuration Guide—Release IOS XE 3.3.0SG and IOS 15.1(1)SG
OL-25340-01
Chapter 42 Configuring Private VLANs
Configuring PVLANs
This example shows how to configure VLAN 550 as a twoway-community VLAN and verify the
configuration:
Switch# configure terminal
Switch(config)# vlan 550
Switch(config-vlan)# private-vlan twoway-community
Switch(config-vlan)# end
Switch# show vlan private-vlan
Primary Secondary Type Interfaces
------- --------- ----------------- ------------------------------------------
202 primary
303 community
440 isolated
550 twoway-community
Associating a Secondary VLAN with a Primary VLAN
To associate secondary VLANs with a primary VLAN, perform this task:
When you associate secondary VLANs with a primary VLAN, note the following:
• The secondary_vlan_list parameter cannot contain spaces. It can contain multiple comma-separated
items. Each item can be a single PVLAN ID or a hyphenated range of PVLAN IDs.
• The secondary_vlan_list parameter can contain multiple community or twoway-community VLAN
IDs.
• The secondary_vlan_list parameter can contain only one isolated VLAN ID.
• Enter a secondary_vlan_list or use the add keyword with a secondary_vlan_list to associate
secondary VLANs with a primary VLAN.
• Use the remove keyword with a secondary_vlan_list to clear the association between secondary
VLANs and a primary VLAN.
• The command does not take effect until you exit VLAN configuration submode.
This example shows how to associate community VLANs 303 through 307 and 309, twoway-community
VLANs 550 through 552, and isolated VLAN 440 with primary VLAN 202 and verify the configuration:
Command Purpose
Step 1
Switch# configure terminal
Enters configuration mode.
Step 2
Switch(config)# vlan primary_vlan_ID
Enters VLAN configuration mode for the primary
VLAN.
Step 3
Switch(config-vlan)# private-vlan association
{secondary_vlan_list | add secondary_vlan_list |
remove secondary_vlan_list}
Associates the secondary VLAN with the primary
VLAN.
The list can contain only one isolated VLAN ID; it can
also contain multiple community or twoway-community
VLAN IDs.
You can use the no keyword to clear all secondary
associations.
Step 4
Switch(config-vlan)# end
Exits VLAN configuration mode.
Step 5
Switch# show vlan private-vlan [type]
Verifies the configuration.

Cisco Catalyst 4500 Series Specifications

General

Series	Catalyst 4500 Series
Category	Switch
Layer Support	Layer 2, Layer 3
Form Factor	Modular chassis
Stackable	No
Chassis Slots	3, 6, 7, 10
Power Supply Options	AC, DC
Redundancy	Power supply, Supervisor engine
Network Management	Cisco IOS Software CLI, SNMP, Cisco Prime Infrastructure
Features	Security, QoS
Port Density	Up to 384 ports per chassis
Security Features	802.1X, ACLs, DHCP Snooping, Dynamic ARP Inspection, IP Source Guard
Supervisor Engine	8-E