Cisco Nexus 9000 Series Configuration Manual page 75

Configuring Private VLANs Using NX-OS
switch(config-if)# exit
switch(config)#
Configuring a Layer 2 Interface as a Private VLAN Host Port
You can configure a Layer 2 interface as a private VLAN host port. In private VLANs, host ports are part of
the secondary VLANs, which are either community VLANs or isolated VLANs.
Note We recommend that you enable BPDU Guard on all interfaces configured as a host port.
You then associate the host port with both the primary and secondary VLANs.
Before You Begin
Ensure that the private VLAN feature is enabled.
Procedure
Step 1
Step 2
Step 3
Step 4
Step 5
Command or Action
config t
Example:
switch# config t
switch(config)#
interface type slot/port
Example:
switch(config)# interface ethernet 2/1
switch(config-if)#
switchport mode private-vlan host
Example:
switch(config-if)# switchport mode
private-vlan host
switch(config-if)#
[no] switchport private-vlan host-association
{primary-vlan-id} {secondary-vlan-id}
Example:
switch(config-if)# switchport
private-vlan host-association 10 50
exit
Example:
switch(config-if)# exit
switch(config)#
Cisco Nexus 9000 Series NX-OS Layer 2 Switching Configuration Guide, Release 7.x
Configuring a Layer 2 Interface as a Private VLAN Host Port
Purpose
Enters configuration mode.
Selects the Layer 2 port to configure as a
private VLAN host port.
Configures the Layer 2 port as a host port for
a private VLAN.
Associate the Layer 2 host port with the
primary and secondary VLANs of a private
VLAN. The secondary VLAN can be either an
isolated or community VLAN.
or
Remove the private VLAN association from
the port.
Exits the interface configuration mode.
61