Pvlans Across Multiple Switches - Cisco Catalyst 4500 Series Software Configuration Manual

Chapter 47 Configuring Private VLANs

PVLANs across Multiple Switches

This section discusses the following topics:
•
•
•
Standard Trunk Ports
As with regular VLANs, PVLANs can span multiple switches. A trunk port carries the primary VLAN
and secondary VLANs to a neighboring switch. The trunk port treats the PVLAN as any other VLAN.
A feature of PVLANs across multiple switches is that traffic from an isolated port in switch A does not
reach an isolated port on Switch B. See
To maintain the security of your private-VLAN configuration and to avoid other use of the VLANs
configured as PVLANs, configure PVLANs on all intermediate devices, including devices that have no
private-VLAN ports.
Trunk ports carry traffic from regular VLANs and also from primary, isolated, community or twoway
Note
community VLANs.
You should use standard trunk ports if both switches undergoing trunking support PVLANs.
Note
Figure 47-2
VLAN 100
VLAN 100 = Primary VLAN
VLAN 201 = Secondary isolated VLAN
VLAN 202 = Secondary community or Twoway-community VLAN
Standard Trunk Ports, page 47-5
Isolated PVLAN Trunk Ports, page 47-6
Promiscuous PVLAN Trunk Ports, page 47-7
PVLANs across Switches
Switch A
VLAN 201 VLAN 202
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Figure 47-2.
Trunk ports
VLAN 201
Carries VLAN 100,
201, and 202 traffic
About Private VLANs
VLAN 100
Switch B
VLAN 202
47-5