Configuring An Interface As A Private Vlan Host Port - Cisco Nexus 6000 Series Configuration Manual

Configuring an Interface as a Private VLAN Host Port

The following example shows how to assign VLAN 200 to a PVLAN as an isolated VLAN:
switch# configure terminal
switch(config)# vlan 200
switch(config-vlan)# private-vlan isolated
Configuring an Interface as a Private VLAN Host Port
In PVLANs, host ports are part of the secondary VLANs, which are either community VLANs or isolated
VLANs. Configuring a PVLAN host port involves two steps. First, you define the port as a PVLAN host port
and then you configure a host association between the primary and secondary VLANs.
We recommend that you enable BPDU Guard on all interfaces configured as a host ports.
Note
Before You Begin
Ensure that the PVLAN feature is enabled.
Procedure
Step 1
Step 2
Step 3
Step 4
Step 5
Step 6
This example shows how to configure Ethernet port 1/12 as a host port for a PVLAN and associate it to
primary VLAN 5 and secondary VLAN 101:
switch# configure terminal
switch(config)# interface ethernet 1/12
switch(config-if)# switchport
switch(config-if)# switchport mode private-vlan host
switch(config-if)# switchport private-vlan host-association 5 101
Cisco Nexus 6000 Series NX-OS Layer 2 Switching Configuration Guide, Release 7.x
36
Command or Action
switch# configure terminal
switch(config)# interface type
[chassis/]slot/port
switch(config-if)# switchport
switch(config-if)# switchport mode
private-vlan host
switch(config-if)# switchport
private-vlan host-association
{primary-vlan-id} {secondary-vlan-id}
switch(config-if)# no switchport
private-vlan host-association
Purpose
Enters global configuration mode.
Selects the port to configure as a PVLAN host port.
This port can be on a FEX (identified by the chassis
option).
If this is a 10G breakout port, the slot/port
Note
syntax is QSFP-module/port.
Configures the interface as a Layer 2 interface and
deletes any configuration specific to Layer 3 on this
interface.
Configures the port as a host port for a PVLAN.
Associates the port with the primary and secondary
VLANs of a PVLAN. The secondary VLAN can be
either an isolated or community VLAN.
(Optional)
Removes the PVLAN association from the port.
Configuring Private VLANs