Table of Contents
Advertisement
S e n d f e e d b a c k t o n x 5 0 0 0 - d o c f e e d b a c k @ c i s c o . c o m
Configuring Private VLANs
This chapter shows you how to configure private VLANs.
Note
You must enable the private VLAN feature before you can perform any of the configurations in this
chapter.
This chapter includes the following sections:
•
•
•
About Private VLANs
A private VLAN partitions the Layer 2 broadcast domain of a VLAN into subdomains, allowing you to
isolate the ports on the switch from each other. A subdomain consists of a primary VLAN and one or
more secondary VLANs (see
VLAN. The secondary VLAN ID differentiates one subdomain from another. The secondary VLANs
may either be isolated VLANs or community VLANs. A host on an isolated VLAN can only
communicate with the associated promiscuous port in its primary VLAN. Hosts on community VLANs
can communicate among themselves and with their associated promiscuous port but not with ports in
other community VLANs.
Note
A PVLAN isolated port on a Cisco Nexus 5000 Series switch running the current release of Cisco
NX-OS does not support IEEE 802.1q encapsulation and cannot be used as a trunk port.
OL-16597-01
About Private VLANs, page 7-1
Configuring a Private VLAN, page 7-5
Verifying Private VLAN Configuration, page 7-10
Figure
C H A P T E R
7-1). All VLANs in a private VLAN domain share the same primary
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
7
7-1
Advertisement
Chapters
Table of Contents
Troubleshooting
