Cisco 7604 Configuration Manual page 222

Configuring Private VLANs
Command
Step 3
Router(config-if)# switchport mode private-vlan
{host | promiscuous}
Router(config-if)# no switchport mode
private-vlan
Step 4
Router(config-if)# switchport private-vlan
mapping primary_vlan_ID { secondary_vlan_list |
add secondary_vlan_list | remove
secondary_vlan_list }
Router(config-if)# no switchport private-vlan
mapping
Step 5
Router(config-if)# end
Step 6
Router# show interfaces [ type
switchport
1. type = ethernet, fastethernet, gigabitethernet, or tengigabitethernet
When you configure a Layer 2 interface as a private VLAN promiscuous port, note the following
information:
•
•
•
This example shows how to configure interface FastEthernet 5/2 as a private VLAN promiscuous port
and map it to a private VLAN:
Router# configure terminal
Router(config)# interface fastethernet 5/2
Router(config-if)# switchport mode private-vlan promiscuous
Router(config-if)# switchport private-vlan mapping 202 303,440
Router(config-if)# end
This example shows how to verify the configuration:
Router# show interfaces fastethernet 5/2 switchport
Name: Fa5/2
Switchport: Enabled
Administrative Mode: private-vlan promiscuous
Operational Mode: down
Administrative Trunking Encapsulation: negotiate
Negotiation of Trunking: On
Access Mode VLAN: 1 (default)
Trunking Native Mode VLAN: 1 (default)
Administrative private-vlan host-association: none ((Inactive))
Administrative private-vlan mapping: 202 (VLAN0202) 303 (VLAN0303) 440 (VLAN0440)
Operational private-vlan: none
Trunking VLANs Enabled: ALL
Pruning VLANs Enabled: 2-1001
Capture Mode Disabled
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
15-16
1
slot/port ]
The secondary_vlan_list parameter cannot contain spaces. It can contain multiple comma-separated
items. Each item can be a single private VLAN ID or a hyphenated range of private VLAN IDs.
Enter a secondary_vlan_list value or use the add keyword with a secondary_vlan_list value to map
the secondary VLANs to the private VLAN promiscuous port.
Use the remove keyword with a secondary_vlan_list value to clear the mapping between secondary
VLANs and the private VLAN promiscuous port.
Chapter 15
Purpose
Configures the Layer 2 port as a private VLAN
promiscuous port.
Clears the private VLAN port configuration.
Maps the private VLAN promiscuous port to a primary
VLAN and to selected secondary VLANs.
Clears all mapping between the private VLAN
promiscuous port and the primary VLAN and any
secondary VLANs.
Exits configuration mode.
Verifies the configuration.
Configuring Private VLANs
OL-4266-08