Configuring An Interface As A Private Vlan Promiscuous Port - Cisco Nexus 5000 Series Configuration Manual

Configuring an Interface as a Private VLAN Promiscuous Port

We recommend that you enable BPDU Guard on all interfaces configured as a host ports.
Note
Before You Begin
Ensure that the private VLAN feature is enabled.
SUMMARY STEPS
1. switch# configure terminal
2. switch(config)# interface type [chassis/]slot/port
3. switch(config-if)# switchport mode private-vlan host
4. switch(config-if)# switchport private-vlan host-association {primary-vlan-id} {secondary-vlan-id}
5. (Optional) switch(config-if)# no switchport private-vlan host-association
DETAILED STEPS
Command or Action
Step 1 switch# configure terminal
Step 2 switch(config)# interface type [chassis/]slot/port
Step 3 switch(config-if)# switchport mode private-vlan
host
Step 4 switch(config-if)# switchport private-vlan
host-association {primary-vlan-id}
{secondary-vlan-id}
Step 5
switch(config-if)# no switchport private-vlan
host-association
This example shows how to configure Ethernet port 1/12 as a host port for a private VLAN and associate it
to primary VLAN 5 and secondary VLAN 101:
switch# configure terminal
switch(config)# interface ethernet 1/12
switch(config-if)# switchport mode private-vlan host
switch(config-if)# switchport private-vlan host-association 5 101
Configuring an Interface as a Private VLAN Promiscuous Port
In a private VLAN domain, promiscuous ports are part of the primary VLAN. Configuring a promiscuous
port involves two steps. First, you define the port as a promiscuous port and then you configure the mapping
between a secondary VLAN and the primary VLAN.
Cisco Nexus 5000 Series NX-OS Layer 2 Switching Configuration Guide, Release 5.0(3)N1(1)
64
Purpose
Enters configuration mode.
Selects the port to configure as a private VLAN host port. This
port can be on a Fabric Extender (identified by the chassis
option).
Configures the port as a host port for a private VLAN.
Associates the port with the primary and secondary VLANs
of a private VLAN. The secondary VLAN can be either an
isolated or community VLAN.
(Optional)
Removes the private VLAN association from the port.
Configuring Private VLANs