Filter
Top Products
39-20
Software Configuration Guide—Release 15.0(2)SG
OL-23818-01
Chapter 39 Configuring Private VLANs
Configuring PVLANs
This example shows how to configure interface FastEthernet 5/2 as a secondary trunk port, and verify
the configuration:
Switch# configure terminal
Switch(config)# interface fastethernet 5/2
Switch(config-if)# switchport mode private-vlan trunk secondary
Switch(config-if)# switchport private-vlan trunk native vlan 10
Switch(config-if)# switchport private-vlan trunk allowed vlan 10. 3-4
Switch(config-if)# switchport private-vlan association trunk 3 301
Switch(config-if)# end
Switch# show interfaces fastethernet 5/2 switchport
Name: Fa5/2
Switchport: Enabled
Administrative Mode: private-vlan trunk secondary
Operational Mode: private-vlan trunk secondary
Administrative Trunking Encapsulation: negotiate
Operational Trunking Encapsulation: dot1q
Negotiation of Trunking: On
Access Mode VLAN: 1 (default)
Step 4
Switch(config-if)# [no] switchport private-vlan
association trunk primary_vlan_ID
secondary_vlan_ID
Configures association between primary VLANs and
secondary VLANs the PVLAN trunk port with a
PVLAN.
Note Multiple PVLAN pairs can be specified using
this command so that a PVLAN trunk port can
carry multiple secondary VLANs. If an
association is specified for the existing primary
VLAN, the existing association is replaced. If
there is no trunk association, any packets
received on secondary VLANs are dropped.
You can use the no keyword to delete all associations
from the primary VLAN.
Step 5
Switch(config-if)# [no] switchport private-vlan
trunk allowed vlan vlan_list all | none | [add |
remove | except] vlan_atom[,vlan_atom...]
Configures a list of allowed normal VLANs on a PVLAN
trunk port.
You can use the no keyword to remove all allowed
normal VLANs on a PVLAN trunk port.
Step 6
Switch(config-if)# switchport private-vlan trunk
native vlan vlan_id
Configures a VLAN to which untagged packets (as in
IEEE 802.1Q tagging) are assigned on a PVLAN trunk
port.
If there is no native VLAN configured, all untagged
packets are dropped.
If the native VLAN is a secondary VLAN and the port
does not have the association for the secondary VLAN,
the untagged packets are dropped.
You can use the no keyword to remove all native VLANs
on a PVLAN trunk port.
Step 7
Switch(config-if)# end
Exits configuration mode.
Step 8
Switch# show interfaces {fastethernet |
gigabitethernet | tengigabitethernet} slot/port
switchport
Verifies the configuration.
Command Purpose