Filter
Top Products
CLI (Command Line Interface)
261
NXA-ENET24 - Software Management Guide
Configure Private VLAN Interfaces
Configure Private VLAN Interfaces
Command Function
switchport mode private-vlan
Use this command to set the private
VLAN mode for an interface.
Use the no form to restore the default
setting.
Syntax:
switchport mode private-vlan {host | promiscuous}
no switchport mode private-vlan
• host – This port type can communicate with all other host ports
assigned to the same secondary VLAN. All communications
outside of this VLAN must pass through a promiscuous port in the
associated primary VLAN.
• promiscuous – This port type can communicate with all other
promiscuous ports in the same primary VLAN, as well as with all
the ports in the associated secondary VLANs.
Default Setting: Normal VLAN
Command Mode: Interface Configuration (Ethernet, Port Channel)
Command Usage: Promiscuous ports assigned to a primary VLAN
can communicate with all other promiscuous ports in the same
VLAN, as well as with all the ports in the associated secondary
VLANs.
Example:
Console(config)#interface ethernet 1/2
Console(config-if)#switchport mode private-vlan
promiscuous
Console(config-if)#exit
Console(config)#interface ethernet 1/3
Console(config-if)#switchport mode private-vlan host
Console(config-if)#
switchport private-vlan host-
association
Use this command to associate an
interface with a secondary VLAN.
Use the no form to remove this
association.
Syntax:
switchport private-vlan host-association secondary-vlan-
id
no switchport private-vlan host-association
• secondary-vlan-id - ID of secondary (i.e, community) VLAN.
(Range: 2-4094, no leading zeroes).
Default Setting: None
Command Mode: Interface Configuration (Ethernet, Port Channel)
Command Usage: All ports assigned to a secondary (i.e., commu-
nity) VLAN can pass traffic between group members, but must com-
municate with resources outside of the group via a promiscuous port.
Example"
Console(config)#interface ethernet 1/3
Console(config-if)#switchport private-vlan host-
association 3
Console(config-if)#
switchport private-vlan mapping
Use this command to map an interface
to a primary VLAN.
Use the no form to remove this
mapping.
Syntax:
switchport private-vlan mapping primary-vlan-id
no switchport private-vlan mapping
• primary-vlan-id – ID of primary VLAN.
(Range: 1-4094, no leading zeroes).
Default Setting: None
Command Mode: Interface Configuration (Ethernet, Port Channel)
Command Usage: Promiscuous ports assigned to a primary VLAN
can communicate with any other promiscuous ports in the same
VLAN, and with the group members within any associated secondary
VLANs.
Example:
Console(config)#interface ethernet 1/2
Console(config-if)#switchport private-vlan mapping 2
Console(config-if)#