12-6
Cisco ME 3400 Ethernet Access Switch Software Configuration Guide
OL-9639-07
Chapter 12 Configuring Private VLANs
Configuring Private VLANs
Tasks for Configuring Private VLANs
To configure a private VLAN, follow these steps:
Step 1 Create the primary and secondary VLANs and associate them. See the “Configuring and Associating
VLANs in a Private VLAN” section on page 12-10.
Note If the VLAN is not created already, the private-VLAN configuration process creates it.
Step 2 Configure interfaces to be isolated or community host ports, and assign VLAN membership to the host
port. See the
“Configuring a Layer 2 Interface as a Private-VLAN Host Port” section on page 12-11.
Step 3 Configure NNIs as promiscuous ports, and map the promiscuous ports to the primary-secondary VLAN
pair. See the
“Configuring a Layer 2 Interface as a Private-VLAN Promiscuous Port” section on
page 12-13.
Step 4 If inter-VLAN routing will be used, configure the primary SVI, and map secondary VLANs to the
primary. See the
“Mapping Secondary VLANs to a Primary VLAN Layer 3 VLAN Interface” section on
page 12-14.
Step 5 Verify private-VLAN configuration.
Default Private-VLAN Configuration
No private VLANs are configured. Newly created VLANs are UNI-ENI isolated VLANs.
Private-VLAN Configuration Guidelines
Guidelines for configuring private VLANs fall into these categories:
• Secondary and Primary VLAN Configuration, page 12-7
• Private-VLAN Port Configuration, page 12-8
• Limitations with Other Features, page 12-8
Secondary and Primary VLAN Configuration
Follow these guidelines when configuring private VLANs:
• You use VLAN configuration mode to configure private VLANs. For more information about VLAN
configuration, see the
“Creating and Modifying VLANs” section on page 11-7.
• You must configure private VLANs on each device where you want private-VLAN ports.
• A private VLAN cannot be a UNI-ENI VLAN.
–
To change a UNI-ENI isolated VLAN (the default) to a private VLAN, enter the private-vlan
VLAN configuration command; this overwrites the default isolated VLAN configuration.
–
To change a UNI-ENI community VLAN to a private VLAN, you must first enter the no
uni-vlan VLAN configuration command to return to the default UNI isolated VLAN
configuration.
To Next Page
Loading...
Need help?
General
