Private VLAN Configuration Task List
The following sections contain the procedures that configure a private VLAN:
•
Creating PVLAN ports
•
Creating a Primary VLAN on page 703
•
Creating a Community VLAN on page 704
•
Creating an Isolated VLAN on page 704
Creating PVLAN ports
Private VLAN ports are those that will be assigned to the private VLAN (PVLAN).
Step
Command Syntax
interface interface
1
no shutdown
2
switchport
3
switchport mode
4
private-vlan {host |
promiscuous | trunk}
For interface details, see
Note: Interfaces that are configured as PVLAN ports cannot be added to regular VLANs. Conversely,
"regular" ports (ports not configured as PVLAN ports) cannot be added to PVLANs.
Figure 33-1
Figure 33-1. Examples of switchport mode private-vlan Command
|
Private VLANs
702
Command Mode
CONFIGURATION
INTERFACE
INTERFACE
INTERFACE
Enable a Physical Interface on page 376
switchport mode private-vlan
shows the use of the
FTOS#conf
FTOS(conf)#interface GigabitEthernet 2/1
FTOS(conf-if-gi-2/1)#switchport mode private-vlan promiscuous
FTOS(conf)#interface GigabitEthernet 2/2
FTOS(conf-if-gi-2/2)#switchport mode private-vlan host
FTOS(conf)#interface GigabitEthernet 2/3
FTOS(conf-if-gi-2/3)#switchport mode private-vlan trunk
FTOS(conf)#interface GigabitEthernet 2/2
FTOS(conf-if-gi-2/2)#switchport mode private-vlan host
FTOS(conf)#interface port-channel 10
FTOS(conf-if-po-10)#switchport mode private-vlan promiscuous
Purpose
Access the INTERFACE mode for the port that you want to
assign to a PVLAN.
Enable the port.
Set the port in Layer 2 mode.
Select the PVLAN mode:
host (port in isolated or community VLAN)
•
promiscuous (intra-VLAN communication port)
•
trunk (inter-switch PVLAN hub port)
•
in
Chapter 19,
command on a port and on a port channel:
Interfaces.