Command Line Interface
8691553-KDU 137 365 Uen D 2006-06-16
To configure primary/secondary associated groups, follow these steps:
1. Use the private-vlan command (section 7.17.16 on page 870) to
designate the primary VLAN that will be used to channel traffic outside of
the isolated VLAN(s), and one or more isolated VLANs.
2. Use the private-vlan association command (section 7.17.17 on
page 871) to map the isolated VLAN(s) to a primary VLAN.
3. Use the switchport mode private-vlan command (section 7.17.18
on page 873) to configure one or more promiscuous port (that is, having
access to all ports in the primary VLAN and all ports in the associated
isolated VLANs), and one or more isolated ports.
Note that a promiscuous port can join a normal VLAN, but at most be
mapped to one primary VLAN. Because private VLAN ports can belong to
a normal VLAN and private VLAN concurrently, the native VLAN of a private
port will not automatically change to the private VLAN when executing the
switchport private-vlan mapping or switchport private-
vlan host-association commands described in the following steps.
4. Use the switchport private-vlan mapping command (section
7.17.19 on page 874) to assign a promiscuous port to a primary VLAN.
5. Use the switchport private-vlan host-association command
(section 7.17.20 on page 875) to assign an isolated port to an isolated
VLAN.
6. Private VLANs can support tagged or untagged members. Use the
switchport allowed vlan command (section 7.17.10 on page 861) to
specify tagged or untagged members.
7. Use the show vlan private-vlan command (section 7.17.21 on page
876) to verify the configuration settings.
switchport
private-vlan
host-association
Associates an interface with an isolated VLAN IC 875
Display Private VLAN Information
show vlan
private-vlan
Shows private VLAN information NE, PE 876
Command Function Mode Page
To Next Page
Loading...
