Cisco Catalyst 3750-X Command Reference Manual page 981

Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands
Usage Guidelines Private-VLAN association or mapping has no effect on the port unless the port has been configured as a
private-VLAN host or promiscuous port by using the switchport mode private-vlan {host |
promiscuous} interface configuration command.
If the port is in private-VLAN host or promiscuous mode but the VLANs do not exist, the command is
allowed, but the port is made inactive.
The secondary_vlan_list parameter cannot contain spaces. It can contain multiple comma-separated
items. Each item can be a single private-VLAN ID or a hyphenated range of private-VLAN IDs. The list
can contain one isolated VLAN and multiple community VLANs.
You can map a promiscuous port to only one primary VLAN. If you enter the switchport private-vlan
mapping command on a promiscuous port that is already mapped to a primary and secondary VLAN,
the primary VLAN mapping is overwritten.
You can add or remove secondary VLANs from promiscuous port private-VLAN mappings by using the
add and remove keywords.
Entering the switchport private-vlan association host command has the same effect as entering the
switchport private-vlan host-association interface configuration command.
Entering the switchport private-vlan association mapping command has the same effect as entering
the switchport private-vlan mapping interface configuration command.
Examples This example shows how to configure an interface as a private VLAN host port and associate it with
primary VLAN 20 and secondary VLAN 501:
Switch# configure terminal
Switch(config)# interface gigabitethernet 1/0/1
Switch(config-if)# switchport mode private-vlan host
Switch(config-if)# switchport private-vlan host-association 20 501
Switch(config-if)# end
This example shows how to configure an interface as a private-VLAN promiscuous port and map it to a
primary VLAN and secondary VLANs:
Switch# configure terminal
Switch(config)# interface gigabitethernet 1/0/2
Switch(config-if)# switchport mode private-vlan promiscuous
Switch(config-if)# switchport private-vlan mapping 20 501-502
Switch(config-if)# end
You can verify private-VLAN mapping by using the show interfaces private-vlan mapping privileged
EXEC command. You can verify private VLANs and interfaces configured on the switch stack by using
the show vlan private-vlan privileged EXEC command.
Related Commands Command
show interfaces
mapping
show vlan
OL-29704-01
Description
private-vlan Displays private VLAN mapping information for VLAN SVIs.
private-vlan Displays all private VLAN relationships or types configured on the
switch or switch stack.
Catalyst 3750-X and 3560-X Switch Command Reference
switchport private-vlan
2-949