Cisco Systems 4500 Switch User Manual


  Open as PDF
of 1504
 
39-16
Software Configuration Guide—Release 15.0(2)SG
OL-23818-01
Chapter 39 Configuring Private VLANs
Configuring PVLANs
This example shows how to configure VLAN 550 as a twoway-community VLAN and verify the
configuration:
Switch# configure terminal
Switch(config)# vlan 550
Switch(config-vlan)# private-vlan twoway-community
Switch(config-vlan)# end
Switch# show vlan private-vlan
Primary Secondary Type Interfaces
------- --------- ----------------- ------------------------------------------
202 primary
303 community
440 isolated
550 twoway-community
Associating a Secondary VLAN with a Primary VLAN
To associate secondary VLANs with a primary VLAN, perform this task:
When you associate secondary VLANs with a primary VLAN, note the following:
The secondary_vlan_list parameter cannot contain spaces. It can contain multiple comma-separated
items. Each item can be a single PVLAN ID or a hyphenated range of PVLAN IDs.
The secondary_vlan_list parameter can contain multiple community or twoway-community VLAN
IDs.
The secondary_vlan_list parameter can contain only one isolated VLAN ID.
Enter a secondary_vlan_list or use the add keyword with a secondary_vlan_list to associate
secondary VLANs with a primary VLAN.
Use the remove keyword with a secondary_vlan_list to clear the association between secondary
VLANs and a primary VLAN.
The command does not take effect until you exit VLAN configuration submode.
This example shows how to associate community VLANs 303 through 307 and 309, twoway-community
VLANs 550 through 552, and isolated VLAN 440 with primary VLAN 202 and verify the configuration:
Command Purpose
Step 1
Switch# configure terminal
Enters configuration mode.
Step 2
Switch(config)# vlan primary_vlan_ID
Enters VLAN configuration mode for the primary
VLAN.
Step 3
Switch(config-vlan)# private-vlan association
{secondary_vlan_list | add secondary_vlan_list |
remove secondary_vlan_list}
Associates the secondary VLAN with the primary
VLAN.
The list can contain only one isolated VLAN ID; it can
also contain multiple community or twoway-community
VLAN IDs.
You can use the no keyword to clear all secondary
associations.
Step 4
Switch(config-vlan)# end
Exits VLAN configuration mode.
Step 5
Switch# show vlan private-vlan [type]
Verifies the configuration.