How To Configure Pvlans; Pvlan Configuration Guidelines And Restrictions - Cisco 4500M Software Manual

Chapter 36 Configuring Private VLANs
When a packet is transmitted out of a PVLAN host or trunk port, the packet logically belongs to the
primary VLAN. This relationship applies even though the packet may be transmitted with the secondary
VLAN tagging for PVLAN trunk ports. In this situation, the primary VLAN ACL and the primary VLAN
QoS on output apply to the packet.

How to Configure PVLANs

To configure a PVLAN, follow this procedure:
Set VTP mode to transparent. See the
Step 1
Create the secondary VLANs. See the
Step 2
Create the primary VLAN. See the
Step 3
Associate the secondary VLAN to the primary VLAN. See the
Step 4
Primary VLAN" section on page
Note
Configure an interface to an isolated or community port. See the
Step 5
PVLAN Host Port" section on page
Associate the isolated port or community port to the primary-secondary VLAN pair. See the
Step 6
"Associating a Secondary VLAN with a Primary VLAN" section on page
Configure an interface as a promiscuous port. See the
Step 7
Promiscuous Port" section on page
Map the promiscuous port to the primary-secondary VLAN pair. See the
Step 8
Interface as a PVLAN Promiscuous Port" section on page
These sections describe how to configure PVLANs:
•
•
•
•
•
•

PVLAN Configuration Guidelines and Restrictions

Follow these guidelines when configuring PVLANs:
•
•
OL-6696-01
Only one isolated VLAN can be mapped to a primary VLAN, but more than one community
VLAN can be mapped to a primary VLAN.
"PVLAN Configuration Guidelines and Restrictions" section on page 36-3
"Configuring a VLAN as a PVLAN" section on page 36-5
"Associating a Secondary VLAN with a Primary VLAN" section on page 36-6
"Configuring a Layer 2 Interface as a PVLAN Promiscuous Port" section on page 36-7
"Configuring a Layer 2 Interface as a PVLAN Host Port" section on page 36-8
"Permitting Routing of Secondary VLAN Ingress Traffic" section on page 36-11
To configure a PVLAN correctly, enable VTP in transparent mode.
Do not include VLAN 1 or VLANs 1002 through 1005 in PVLANs.
"Disabling VTP (VTP Transparent Mode)" section on page
"Configuring a VLAN as a PVLAN" section on page
"Configuring a VLAN as a PVLAN" section on page
36-6.
36-8.
"Configuring a Layer 2 Interface as a PVLAN
36-7.
36-7.
Software Configuration Guide—Release 12.2(25)EW
How to Configure PVLANs
"Associating a Secondary VLAN with a
"Configuring a Layer 2 Interface as a
36-6.
"Configuring a Layer 2
27-9.
36-5.
36-5.
36-3