Filter
Top Products
15-6
Cisco Catalyst Switch Module 3110 and 3012 for IBM BladeCenter Software Configuration Guide
OL-12189-01
Chapter 15 Configuring Private VLANs
Configuring Private VLANs
• If two stacks merge, private VLANs on the winning stack are not affected, but private-VLAN
configuration on the losing switch is lost when that switch reboots.
For more information about switch stacks, see Chapter 5, “Managing Switch Stacks.”
Configuring Private VLANs
These sections contain this configuration information:
• Tasks for Configuring Private VLANs, page 15-6
• Default Private-VLAN Configuration, page 15-6
• Private-VLAN Configuration Guidelines, page 15-7
• Configuring and Associating VLANs in a Private VLAN, page 15-10
• Configuring a Layer 2 Interface as a Private-VLAN Host Port, page 15-11
• Configuring a Layer 2 Interface as a Private-VLAN Promiscuous Port, page 15-13
• Mapping Secondary VLANs to a Primary VLAN Layer 3 VLAN Interface, page 15-14
Tasks for Configuring Private VLANs
To configure a private VLAN, perform these steps:
Step 1 Set VTP mode to transparent.
Step 2 Create the primary and secondary VLANs and associate them. See the “Configuring and Associating
VLANs in a Private VLAN” section on page 15-10.
Note If the VLAN is not created already, the private-VLAN configuration process creates it.
Step 3 Configure interfaces to be isolated or community host ports, and assign VLAN membership to the host
port. See the “Configuring a Layer 2 Interface as a Private-VLAN Host Port” section on page 15-11.
Step 4 Configure interfaces as promiscuous ports, and map the promiscuous ports to the primary-secondary
VLAN pair. See the “Configuring a Layer 2 Interface as a Private-VLAN Promiscuous Port” section on
page 15-13.
Step 5 If inter-VLAN routing will be used, configure the primary SVI, and map secondary VLANs to the
primary. See the “Mapping Secondary VLANs to a Primary VLAN Layer 3 VLAN Interface” section on
page 15-14.
Step 6 Verify private-VLAN configuration.
Default Private-VLAN Configuration
No private VLANs are configured.