Associating Secondary Vlans With A Primary Private Vlan - Cisco Nexus 3000 series Configuration Manual

Associating Secondary VLANs with a Primary Private VLAN

This example shows how to assign VLAN 100 to a private VLAN as a community VLAN:
switch# configure terminal
switch(config)# vlan 100
switch(config-vlan)# private-vlan community
This example shows how to assign VLAN 200 to a private VLAN as an insolated VLAN:
switch# configure terminal
switch(config)# vlan 200
switch(config-vlan)# private-vlan isolated
Associating Secondary VLANs with a Primary Private VLAN
When you associate secondary VLANs with a primary VLAN, follow these guidelines:
• The secondary-vlan-list parameter cannot contain spaces. It can contain multiple comma-separated items.
• The secondary-vlan-list parameter can contain multiple community VLAN IDs and one isolated VLAN
• Enter a secondary-vlan-list or use the add keyword with a secondary-vlan-list to associate secondary
• Use the remove keyword with a secondary-vlan-list to clear the association between secondary VLANs
• You change the association between a secondary and primary VLAN by removing the existing association
If you delete either the primary or secondary VLAN, the VLAN becomes inactive on the port where the
association is configured. When you enter the no private-vlan command, the VLAN returns to the normal
VLAN mode. All primary and secondary associations on that VLAN are suspended, but the interfaces remain
in private VLAN mode. If you again convert the specified VLAN to private VLAN mode, the original
associations are reinstated.
If you enter the no vlan command for the primary VLAN, all private VLAN associations with that VLAN
are lost. However, if you enter the no vlan command for a secondary VLAN, the private VLAN associations
with that VLAN are suspended and are reinstated when you recreate the specified VLAN and configure it as
the previous secondary VLAN.
Before You Begin
Ensure that the private VLAN feature is enabled.
SUMMARY STEPS
1. switch# configure terminal
2. switch(config)# vlan primary-vlan-id
3. switch(config-vlan)# private-vlan association {[add] secondary-vlan-list | remove secondary-vlan-list}
4. (Optional) switch(config-vlan)# no private-vlan association
Cisco Nexus 3000 Series NX-OS Layer 2 Switching Configuration Guide, Release 5.0(3)U1(1)
40
Each item can be a single secondary VLAN ID or a hyphenated range of secondary VLAN IDs.
ID.
VLANs with a primary VLAN.
and a primary VLAN.
and then adding the desired association.
Configuring Private VLANs