Cisco Nexus 9000 Series Configuration Manual page 84

Configuring a Layer 2 FEX Interface as a Private VLAN Isolated Trunk Port
Step 4
Step 5
Step 6
Step 7
Step 8
Cisco Nexus 9000 Series NX-OS Layer 2 Switching Configuration Guide, Release 7.x
70
Command or Action
switchport mode private-vlan trunk
secondary
Example:
switch(config-if)# switchport mode
private-vlan trunk secondary
switch(config-if)#
switchport private-vlan trunk native
vlan vlan-id
Example:
switch(config-if)# switchport
private-vlan trunk native vlan 5
switchport private-vlan trunk allowed
vlan {add vlan-list | all | except vlan-list
| none | remove vlan-list}
Example:
switch(config-if)# switchport
private-vlan trunk allowed vlan add
1
switch(config-if)#
[no] switchport private-vlan association
trunk {primary-vlan-id
[secondary-vlan-id]}
Example:
switch(config-if)# switchport
private-vlan association trunk 10
101
switch(config-if)#
exit
Example:
switch(config-if)# exit
switch(config)#
Configuring Private VLANs Using NX-OS
Purpose
Configures the Layer 2 port as an isolated trunk port
to carry traffic for multiple isolated VLANs.
You cannot put community VLANs into the
Note
isolated trunk port.
(Optional)
Sets the native VLAN for the 802.1Q trunk. Valid
values are from 1 to 3968 and 4048 to 4093. The
default value is 1.
If you are using a private VLAN as the native
Note
VLAN for the isolated trunk port, you must
enter a value for a secondary VLAN or a
normal VLAN; you cannot configure a
primary VLAN as the native VLAN.
Sets the allowed VLANs for the private VLAN isolated
trunk interface. Valid values are from 1 to 3968 and
4048 to 4093.
When you map the private primary and secondary
VLANs to the isolated trunk port, the system
automatically puts all the primary VLANs into the
allowed VLAN list for this port.
Note Ensure that the native VLAN is part of the
allowed VLAN list. The default for this
command is to allow no VLANs on this
interface, so you must configure the native
VLAN as an allowed VLAN, unless it is
already added as an associated VLAN, to pass
native VLAN traffic.
Configures the isolated trunk PVLAN pair on the port
for a primary VLAN and the associated secondary
VLAN. The secondary VLAN must be an isolated
VLAN.
Exits the interface configuration mode.