Configuring Private Edge Vlans - Cisco Catalyst 2000 Configuration Handbook

106 Cisco LAN Switching Configuration Handbook
This command associates or binds the secondary VLANs to the primary VLAN. The
add option enables other VLANs to be associated in the future.
Place ports into the isolated and community VLANs:
5.
(global) interface type mod/port
(interface) switchport
(interface) switchport mode private-vlan host
(interface) switchport mode private-vlan host-association primary_number sec-
ondary_number
After you create and associate the primary and secondary VLANs, you must assign
ports to that VLAN.
Map the isolated and community VLANs to promiscuous ports:
6.
(global) interface type mod/port
(interface) switchport
(interface) switchport mode private-vlan promiscuous
(interface) switchport mode private-vlan mapping primary_number
secondary_number
After you assign ports to the secondary VLANs, you must map the VLANs to a
promiscuous port for access outside the isolated or community VLAN.
(Optional) Map the isolated and community VLANs to a Multilayer Switch
7.
Feature Card (MSFC) interface:
(global) interface primary_number
(interface) ip address address mask
(interface) private-vlan mapping primary_number secondary_number
If your switch has an MSFC, you can map the private VLANs to the MSFC. For an
IOS switch, you go to the VLAN interface with the primary number and then map
the primary and secondary VLANs to that port.

Configuring Private Edge VLANs

The 3500XL switch uses the concept of a protected port to allow for control of traffic on
the switch. A protected port on a 3500XL will not forward traffic to another protected
port on the same switch. This behavior is similar to an isolated VLAN in that protected
ports cannot communicate with one another. Use the following optional command to
configure a protected port:
(global) interface type mod/port
(interface) port protected