Configuration Restrictions And Guidelines; Configuration Procedure - HP FlexFabric 12900 Series Configuration Manual

Configure a downlink port (for example, the port connecting Device B to a host in
a host port. The host port can be automatically assigned to the secondary VLAN and its
associated primary VLAN.
If a downlink port allows multiple secondary VLANs, configure the port as a trunk secondary
port. The trunk secondary port can be automatically assigned to the secondary VLANs and
their associated primary VLANs.
For more information about promiscuous, trunk promiscuous, host, and trunk secondary ports, see
Layer 2—LAN Switching Command Reference.
4. Associate the secondary VLANs with the primary VLAN.
5. (Optional.) Configure Layer 3 communication between the specified secondary VLANs that are
associated with the primary VLAN.

Configuration restrictions and guidelines

When you configure the private VLAN feature, follow these restrictions and guidelines:
Make sure the following requirements are met:
•
For a promiscuous port:
−
−
For a host port:
−
−
A trunk promiscuous or trunk secondary port must be a tagged member of the primary VLANs
and the secondary VLANs.
• After you configure a primary VLAN, the system automatically synchronizes the dynamic MAC
address entries of the primary VLAN with the dynamic MAC address entries of the secondary
VLANs.
VLAN 1 (system default VLAN) does not support the private VLAN configuration.
•

Configuration procedure

To configure the private VLAN feature:
Step
1. Enter system view.
2. Create a VLAN and enter
VLAN view.
3. Configure the VLAN as a
primary VLAN.
4. Return to system view.
5. Create one or multiple
secondary VLANs.
6. Return to system view.
The primary VLAN is the PVID of the port.
The port is an untagged member of the primary VLAN and secondary VLANs.
The PVID of the port is a secondary VLAN.
The port is an untagged member of the primary VLAN and the secondary VLAN.
Command
system-view
vlan vlan-id
private-vlan primary
quit
vlan { vlan-id1 [ to vlan-id2 ] | all }
quit
135
Figure
Remarks
N/A
N/A
By default, a VLAN is not a primary
VLAN.
N/A
N/A
N/A
37) as