Configuring An Interface As A Private Vlan Host Port - Cisco nexus 5000 series Configuration Manual

Configuring an Interface as a Private VLAN Host Port

This example shows how to associate community VLANs 100 through 110 and isolated VLAN 200 with
primary VLAN 5:
switch# configure terminal
switch(config)# vlan 5
switch(config-vlan)# private-vlan association 100-110, 200
Configuring an Interface as a Private VLAN Host Port
In PVLANs, host ports are part of the secondary VLANs, which are either community VLANs or isolated
VLANs. Configuring a PVLAN host port involves two steps. First, you define the port as a PVLAN host port
and then you configure a host association between the primary and secondary VLANs.
We recommend that you enable BPDU Guard on all interfaces configured as a host ports.
Note
Before You Begin
Ensure that the PVLAN feature is enabled.
SUMMARY STEPS
1. switch# configure terminal
2. switch(config)# interface type [chassis/]slot/port
3. switch(config-if)# switchport mode private-vlan host
4. switch(config-if)# switchport private-vlan host-association {primary-vlan-id} {secondary-vlan-id}
5. (Optional) switch(config-if)# no switchport private-vlan host-association
DETAILED STEPS
Command or Action
Step 1
switch# configure terminal
Step 2
switch(config)# interface type [chassis/]slot/port
Step 3 switch(config-if)# switchport mode private-vlan
host
Step 4 switch(config-if)# switchport private-vlan
host-association {primary-vlan-id}
{secondary-vlan-id}
Step 5 switch(config-if)# no switchport private-vlan
host-association
Cisco Nexus 5000 Series NX-OS Layer 2 Switching Configuration Guide, Release 5.1(3)N1(1)
60
Purpose
Enters global configuration mode.
Selects the port to configure as a PVLAN host port. This port
can be on a FEX (identified by the chassis option).
Configures the port as a host port for a PVLAN.
Associates the port with the primary and secondary VLANs
of a PVLAN. The secondary VLAN can be either an isolated
or community VLAN.
(Optional)
Removes the PVLAN association from the port.
Configuring Private VLANs
OL-25842-01