Configuring An Interface As A Private Vlan Host Port - Cisco Nexus 3000 Series Configuration Manual

Configuring an Interface as a Private VLAN Host Port

• Use the remove keyword with a secondary-vlan-list to clear the association between secondary VLANs
• You change the association between a secondary and primary VLAN by removing the existing association
If you delete either the primary or secondary VLAN, the VLAN becomes inactive on the port where the
association is configured. When you enter the no private-vlan command, the VLAN returns to the normal
VLAN mode. All primary and secondary associations on that VLAN are suspended, but the interfaces remain
in PVLAN mode. If you again convert the specified VLAN to PVLAN mode, the original associations are
reinstated.
If you enter the no vlan command for the primary VLAN, all PVLAN associations with that VLAN are lost.
However, if you enter the no vlan command for a secondary VLAN, the PVLAN associations with that VLAN
are suspended and are reinstated when you recreate the specified VLAN and configure it as the previous
secondary VLAN.
Before You Begin
Ensure that the PVLAN feature is enabled.
Procedure
Step 1
Step 2
Step 3
Step 4
This example shows how to associate community VLANs 100 through 110 and isolated VLAN 200 with
primary VLAN 5:
switch# configure terminal
switch(config)# vlan 5
switch(config-vlan)# private-vlan association 100-110, 200
Configuring an Interface as a Private VLAN Host Port
In PVLANs, host ports are part of the secondary VLANs, which are either community VLANs or isolated
VLANs. Configuring a PVLAN host port involves two steps. First, you define the port as a PVLAN host port
and then you configure a host association between the primary and secondary VLANs.
Cisco Nexus 3000 Series NX-OS Layer 2 Switching Configuration Guide, Release 6.x
26
and a primary VLAN.
and then adding the desired association.
Command or Action
switch# configure terminal
switch(config)# vlan primary-vlan-id
switch(config-vlan)# private-vlan
association {[add] secondary-vlan-list
| remove secondary-vlan-list}
switch(config-vlan)# no private-vlan
association
Purpose
Enters global configuration mode.
Enters the number of the primary VLAN that you are
working in for the PVLAN configuration.
Associates the secondary VLANs with the primary
VLAN. Use the remove keyword with a
secondary-vlan-list to clear the association between
secondary VLANs and a primary VLAN.
(Optional)
Removes all associations from the primary VLAN and
returns it to normal VLAN mode.
Configuring Private VLANs
OL-29545-03