Configuring An Interface As A Private Vlan Promiscuous Port - Cisco N5010P-N2K-BE Software Configuration Manual

Chapter 7 Configuring Private VLANs
S e n d f e e d b a c k t o n x 5 0 0 0 - d o c f e e d b a c k @ c i s c o . c o m
We recommend that you enable BPDU Guard on all interfaces configured as a host ports. See
Note
Chapter 10, "Configuring STP Extensions"
Ensure that the private VLAN feature is enabled.
To configure an interface as a private VLAN host port, perform this task:
Command
Step 1
switch# configure terminal
Step 2
switch(config)# interface type slot/port
Step 3
switch(config-if)# switchport mode
private-vlan host
Step 4
switch(config-if)# switchport
private-vlan host-association
{primary-vlan-id} {secondary-vlan-id}
This example shows how to configure the Ethernet port 1/12 as a host port for a private VLAN and
associate it to primary VLAN 5 and secondary VLAN 101:
switch# configure terminal
switch(config)# interface ethernet 1/12
switch(config-if)# switchport mode private-vlan host
switch(config-if)# switchport private-vlan host-association 5 101
To remove the private VLAN association from an interface, perform this task:
Command
switch(config-if)# no switchport
private-vlan host-association

Configuring an Interface as a Private VLAN Promiscuous Port

You can configure an interface as a private VLAN promiscuous port, and then you can associate that
promiscuous port with the primary and secondary VLANs.
Ensure that the private VLAN feature is enabled.
To configure an interface as a private VLAN promiscuous port, perform this task:
Command
Step 1
switch# configure terminal
Step 2
switch(config)# interface type slot/port
OL-16597-01
for information on configuring BPDU Guard.
Purpose
Enters configuration mode.
Selects the port to configure as a private VLAN host
port. The interface can be either a physical Ethernet
port.
Configures the port as a host port for a private VLAN.
Associates the port with the primary and secondary
VLANs of a private VLAN. The secondary VLAN
can be either an isolated or community VLAN.
Purpose
Removes the private VLAN association from the port.
Purpose
Enters configuration mode.
Selects the port to configure as a private VLAN
promiscuous port. A physical interface is required.
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
Configuring a Private VLAN
7-9