Cisco Nexus 9000 Series Configuration Manual page 81

Configuring Private VLANs Using NX-OS
Step 7
Step 8
Step 9
Step 10
This example shows how to configure the Layer 2 port 2/1 as a promiscuous trunk port associated with two
primary VLANs and their associated secondary VLANs:
switch# config t
switch(config)# interface ethernet 2/1
switch(config-if)# switchport
switch(config-if)# switchport mode private-vlan trunk promiscuous
switch(config-if)# switchport private-vlan trunk allowed vlan add 1
Command or Action
Example:
switch(config-if)# switchport
private-vlan trunk allowed vlan
add 1
switch(config-if)#
[no]switchport private-vlan mapping
trunk primary-vlan-id
[secondary-vlan-id] {add
secondary-vlan-list | remove
secondary-vlan-id}
Example:
switch(config-if)# switchport
private-vlan mapping trunk 4 5
switch(config-if)#
exit
Example:
switch(config-if)# exit
switch(config)#
show interface switchport
Example:
switch# show interface switchport
copy running-config startup-config
Example:
switch(config)# copy running-config
startup-config
Cisco Nexus 9000 Series NX-OS Layer 2 Switching Configuration Guide, Release 7.x
Configuring a Layer 2 Interface as a Private VLAN Promiscuous Trunk Port
Purpose
When you map the private primary and secondary
VLANs to the promiscuous trunk port, the system
automatically puts all the primary VLANs into the
allowed VLAN list for this port.
Ensure that the native VLAN is part of the
Note
allowed VLAN list. The default for this
command is to allow no VLANs on this
interface, so you must configure the native
VLAN as an allowed VLAN, unless it is already
added as an associated VLAN, to pass native
VLAN traffic.
Map or remove the mapping for the promiscuous trunk
port with the primary VLAN and a selected list of
associated secondary VLANs. The secondary VLAN can
be either an isolated or community VLAN. The private
VLAN association between primary and secondary
VLANs must be operational to pass traffic. You can map
a maximum of 16 private VLAN primary and secondary
pairs on each promiscuous trunk port. You must reenter
the command for each primary VLAN that you are
working with.
or
Remove the private VLAN promiscuous trunk mappings
from the interface.
Exits the interface configuration mode.
(Optional)
Displays information on all interfaces configured as
switch ports.
(Optional)
Copies the running configuration to the startup
configuration.
67