Cisco Nexus 9000 Series Configuration Manual page 66

Guidelines and Limitations for Configuring Private VLANs
• When you configure PVLAN promiscuous trunks or PVLAN isolated trunks, we recommend that you
allow non-PVLANs in the list specified by the switchport private-vlan trunk allowed id command.
PVLANs are mapped or associated depending on the PVLAN trunk mode.
• PVLANs support PACLs and RACLs.
• PVLANs support SVIs as follows:
• PVLANs support Layer 2 forwarding.
• PVLANs support STP as follows:
• PVLANs are supported across switches through a regular trunk port.
• PVLANs are supported on the 10G ports of the Cisco Nexus 9396PQ and 93128TX switches.
• PVLAN configurations are not supported on the ALE ports of Cisco Nexus 9300 Series switches.
• PVLAN port mode is not supported on the Cisco Nexus 3164Q switch.
• On Network Forwarding Engines (NFE), PVLANs do not provide support on breakout.
• PVLANs are not supported on vPC or port channel FEX ports.
• PVLANs do not provide support for IP multicast or IGMP snooping.
• PVLANs do not provide support for DHCP snooping.
• PVLANs do not provide support for PVLAN QoS.
• PVLANs do not provide support for VACLs.
• PVLANs do not provide support for VTP.
• PVLANs do not provide support for tunnels.
• PVLANs do not provide support for VXLANs.
• PVLANs do not provide support for SPAN when the source is a PVLAN VLAN.
• You cannot configure a shared interface to be part of a PVLAN. For more details, see the Cisco Nexus
9000 Series NX-OS Interfaces Configuration Guide.
• Although the Cisco NX-OS CLI allows the configuration of multiple isolated VLAN configurations per
PVLAN group, such a configuration is not supported. A PVLAN group can have at most one isolated
VLAN.
• Beginning with Cisco NX-OS Release 7.0(3)I5(1), PVLAN association on a VLAN is not supported.
• Beginning with Cisco NX-OS Release 7.0(3)I5(1), the no private-vlan primary command causes the
association under the PVLAN to become inactive. Issuing a subsequent private-vlan primary command
Cisco Nexus 9000 Series NX-OS Layer 2 Switching Configuration Guide, Release 7.x
52
◦ SVIs on the primary VLANs.
◦ Primary and secondary IP addresses on the SVI.
◦ HSRP on the primary SVI.
◦ RSTPs
◦ MSTs
Configuring Private VLANs Using NX-OS