Configuring And Associating Vlans In A Private Vlan - Cisco WS-CBS3032-DEL Software Configuration Manual

Configuring Private VLANs
•
•

Configuring and Associating VLANs in a Private VLAN

Beginning in privileged EXEC mode, follow these steps to configure a private VLAN:
The private-vlan commands do not take effect until you exit VLAN configuration mode.
Note
Command
Step 1 configure terminal
Step 2
vtp mode transparent
Step 3 vlan vlan-id
Step 4 private-vlan primary
Step 5 exit
Step 6 vlan vlan-id
Step 7 private-vlan isolated
Step 8 exit
Step 9
vlan vlan-id
Step 10
private-vlan community
Step 11 exit
Step 12 vlan vlan-id
Step 13 private-vlan association [add | remove]
secondary_vlan_list
Step 14 end
Cisco Catalyst Blade Switch 3130 and 3032 for Dell Software Configuration Guide
16-10
If you configure a static MAC address on a promiscuous port in the primary VLAN, you must add
the same static address to all associated secondary VLANs. If you configure a static MAC address
on a host port in a secondary VLAN, you must add the same static MAC address to the associated
primary VLAN. When you delete a static MAC address from a private-VLAN port, you must remove
all instances of the configured MAC address from the private VLAN.
Dynamic MAC addresses learned in one VLAN of a private VLAN are replicated in the
Note
associated VLANs. For example, a MAC address learned in a secondary VLAN is replicated
in the primary VLAN. When the original dynamic MAC address is deleted or aged out, the
replicated addresses are removed from the MAC address table.
Configure Layer 3 VLAN interfaces (SVIs) only for primary VLANs.
Purpose
Enter global configuration mode.
Set VTP mode to transparent (disable VTP).
Enter VLAN configuration mode and designate or create a VLAN that
will be the primary VLAN. The VLAN ID range is 2 to 1001 and 1006
to 4094.
Designate the VLAN as the primary VLAN.
Return to global configuration mode.
(Optional) Enter VLAN configuration mode and designate or create a
VLAN that will be an isolated VLAN. The VLAN ID range is 2 to 1001
and 1006 to 4094.
Designate the VLAN as an isolated VLAN.
Return to global configuration mode.
(Optional) Enter VLAN configuration mode and designate or create a
VLAN that will be a community VLAN. The VLAN ID range is 2 to
1001 and 1006 to 4094.
Designate the VLAN as a community VLAN.
Return to global configuration mode.
Enter VLAN configuration mode for the primary VLAN designated in
Step 2.
Associate the secondary VLANs with the primary VLAN.
Return to privileged EXEC mode.
Chapter 16 Configuring Private VLANs
OL-13270-06