Cisco Catalyst 3750-E Software Configuration Manual page 482

Configuring Private VLANs
This example shows how to configure an interface as a private-VLAN host port, associate it with a
private-VLAN pair, and verify the configuration:
Switch# configure terminal
Switch(config)# interface gigabitethernet1/0/22
Switch(config-if)# switchport mode private-vlan host
Switch(config-if)# switchport private-vlan host-association 20 501
Switch(config-if)# end
Switch# show interfaces gigabitethernet1/0/22 switchport
Name: Gi1/0/22
Switchport: Enabled
Administrative Mode: private-vlan host
Operational Mode: private-vlan host
Administrative Trunking Encapsulation: negotiate
Operational Trunking Encapsulation: native
Negotiation of Trunking: Off
Access Mode VLAN: 1 (default)
Trunking Native Mode VLAN: 1 (default)
Administrative Native VLAN tagging: enabled
Voice VLAN: none
Administrative private-vlan host-association: 20 501
Administrative private-vlan mapping: none
Administrative private-vlan trunk native VLAN: none
Administrative private-vlan trunk Native VLAN tagging: enabled
Administrative private-vlan trunk encapsulation: dot1q
Administrative private-vlan trunk normal VLANs: none
Administrative private-vlan trunk private VLANs: none
Operational private-vlan:
20 501
<output truncated>
Configuring a Layer 2 Interface as a Private-VLAN Promiscuous Port
Beginning in privileged EXEC mode, follow these steps to configure a Layer 2 interface as a
private-VLAN promiscuous port and map it to primary and secondary VLANs:
Isolated and community VLANs are both secondary VLANs.
Note
Command
Step 1 configure terminal
Step 2 interface interface-id
Step 3 switchport mode private-vlan promiscuous
Step 4 switchport private-vlan mapping primary_vlan_id
{add | remove} secondary_vlan_list
Step 5 end
Step 6
show interfaces [interface-id] switchport
Step 7 copy running-config startup config
Catalyst 3750-E and 3560-E Switch Software Configuration Guide
16-12
Chapter 16
Purpose
Enter global configuration mode.
Enter interface configuration mode for the Layer 2
interface to be configured.
Configure the Layer 2 port as a private-VLAN
promiscuous port.
Map the private-VLAN promiscuous port to a primary
VLAN and to selected secondary VLANs.
Return to privileged EXEC mode.
Verify the configuration.
(Optional) Save your entries in the switch startup
configuration file.
Configuring Private VLANs
OL-9775-08