Configuring An Interface As A Private Vlan Host Port - Cisco Nexus 3000 series Configuration Manual

Configuring Private VLANs
DETAILED STEPS
Command or Action
Step 1
switch# configure terminal
Step 2
switch(config)# vlan primary-vlan-id
Step 3 switch(config-vlan)# private-vlan association {[add]
secondary-vlan-list | remove secondary-vlan-list}
Step 4 switch(config-vlan)# no private-vlan association
This example shows how to associate community VLANs 100 through 110 and isolated VLAN 200 with
primary VLAN 5:
switch# configure terminal
switch(config)# vlan 5
switch(config-vlan)# private-vlan association 100-110, 200

Configuring an Interface as a Private VLAN Host Port

In private VLANs, host ports are part of the secondary VLANs, which are either community VLANs or
isolated VLANs. Configuring a private VLAN host port involves two steps. First, you define the port as a
private VLAN host port and then you configure a host association between the primary and secondary VLANs.
Note We recommend that you enable BPDU Guard on all interfaces configured as a host ports.
Before You Begin
Ensure that the private VLAN feature is enabled.
SUMMARY STEPS
1. switch# configure terminal
2. switch(config)# interface type [chassis/]slot/port
3. switch(config-if)# switchport mode private-vlan host
4. switch(config-if)# switchport private-vlan host-association {primary-vlan-id} {secondary-vlan-id}
5. (Optional) switch(config-if)# no switchport private-vlan host-association
Cisco Nexus 3000 Series NX-OS Layer 2 Switching Configuration Guide, Release 5.0(3)U1(1)
Configuring an Interface as a Private VLAN Host Port
Purpose
Enters configuration mode.
Enters the number of the primary VLAN that you are
working in for the private VLAN configuration.
Associates the secondary VLANs with the primary VLAN.
(Optional)
Removes all associations from the primary VLAN and
returns it to normal VLAN mode.
41