Configuring An Interface As A Private Vlan Host Port - Cisco nexus 5000 series Cli Configuration Manual

Configuring a Private VLAN
S e n d f e e d b a c k t o n x 5 0 0 0 - d o c f e e d b a c k @ c i s c o . c o m
•
•
•
If you delete either the primary or secondary VLAN, the ports that are associated with the VLAN become
inactive. When you enter the no private-vlan command, the VLAN returns to the normal VLAN mode.
All primary and secondary associations on that VLAN are suspended, but the interfaces remain in private
VLAN mode. If you again convert the specified VLAN to private VLAN mode, the original associations
are reinstated.
If you enter the no vlan command for the primary VLAN, all private VLAN associations with that
VLAN are lost. However, if you enter the no vlan command for a secondary VLAN, the private VLAN
associations with that VLAN are suspended and return when you recreate the specified VLAN and
configure it as the previous secondary VLAN.
Ensure that the private VLAN feature is enabled.
To associate secondary VLANs with a primary VLAN, perform this task:
Command
Step 1
switch# configure terminal
Step 2
switch(config)# vlan primary-vlan-id
Step 3
switch(config-vlan)# private-vlan
association {[add] secondary-vlan-list |
remove secondary-vlan-list}
This example shows how to associate community VLANs 100 through 103 and isolated VLAN 109 with
primary VLAN 5:
switch# configure terminal
switch(config)# vlan 5
switch(config-vlan)# private-vlan association 100-103, 109
To remove all associations from the private VLAN, perform this task:
Command
switch(config-vlan)# no private-vlan
association

Configuring an Interface as a Private VLAN Host Port

You can configure an interface as a private VLAN host port. In private VLANs, host ports are part of the
secondary VLANs, which are either community VLANs or isolated VLANs. You then associate the host
port with both the primary and secondary VLANs.
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
1-8
Enter a secondary-vlan-list or use the add keyword with a secondary-vlan-list to associate
secondary VLANs with a primary VLAN.
Use the remove keyword with a secondary-vlan-list to clear the association between secondary
VLANs and a primary VLAN.
You change the association between a secondary and primary VLAN by removing the existing
association and then adding the desired association.
Chapter 1
Purpose
Enters configuration mode.
Enter the number of the primary VLAN that you are
working in for the private VLAN configuration.
Associates the secondary VLANs with the primary
VLAN.
Purpose
Removes all associations from the primary VLAN
and returns it to normal VLAN mode.
Configuring Private VLANs
OL-16597-01