Configuring The Allowed Vlans For Pvlan Trunking Ports - Cisco Nexus 6000 Series Configuration Manual

Configuring the Allowed VLANs for PVLAN Trunking Ports

Step 5
Step 6
The following example shows how to configure Ethernet interface 1/1 as an isolated trunk port for a PVLAN
and then associate the secondary VLANs to the primary VLAN:
switch# configure terminal
switch(config)# interface ethernet 1/1
switch(config-if)# switchport
switch(config-if)# switchport mode private-vlan trunk secondary
switch(config-if)# switchport private-vlan association trunk 5 100
switch(config-if)# switchport private-vlan association trunk 6 200
Configuring the Allowed VLANs for PVLAN Trunking Ports
Isolated trunk and promiscuous trunk ports can carry traffic from regular VLANs along with PVLANs.
Before You Begin
Ensure that the PVLAN feature is enabled.
Procedure
Step 1
Step 2
Step 3
Step 4
Cisco Nexus 6000 Series NX-OS Layer 2 Switching Configuration Guide, Release 7.x
40
Command or Action
switch(config-if)# switchport
private-vlan association trunk
{primary-vlan-id}
{secondary-vlan-id}
switch(config-if)# no switchport
private-vlan association trunk
[primary-vlan-id]
Command or Action
switch# configure terminal
switch(config)# interface type
[chassis/]slot/port
switch(config-if)# switchport
switch(config-if)# switchport
private-vlan trunk allowed vlan
{vlan-list | all | none [add | except
| none | remove {vlan-list}]}
Purpose
Associates the isolated trunk port with the primary and
secondary VLANs of a PVLAN. The secondary VLAN
should be an isolated VLAN. Only one isolated VLAN can
be mapped under a given primary VLAN.
(Optional)
Removes the PVLAN association from the port. If the
primary-vlan-id is not supplied, all PVLAN associations are
removed from the port.
Purpose
Enters global configuration mode.
Selects the port to configure as a PVLAN host port. This
port can be on a FEX (identified by the chassis option).
If this is a 10G breakout port, the slot/port syntax
Note
is QSFP-module/port.
Configures the interface as a Layer 2 interface and deletes
any configuration specific to Layer 3 on this interface.
Sets the allowed VLANs for the private trunk interface. The
default is to allow only mapped/associated VLANs on the
PVLAN trunk interface.
Note The primary VLANs do not need to be explicitly
added to the allowed VLAN list. They are added
automatically once there is a mapping between
primary and secondary VLANs.
Configuring Private VLANs