Configuring A Layer 2 Interface As A Private Vlan Host Port - Cisco 6500 Series Software Configuration Manual

Configuring Private VLANs
•
•
This example shows how to permit routing of secondary VLAN ingress traffic from private VLANs 303
through 307, 309, and 440 and verify the configuration:
Router# configure terminal
Router(config)# interface vlan 202
Router(config-if)# private-vlan mapping add 303-307,309,440
Router(config-if)# end
Router# show interfaces private-vlan mapping
Interface Secondary VLAN Type
--------- -------------- -----------------
vlan202
vlan202
vlan202
vlan202
vlan202
vlan202
vlan202
Router#

Configuring a Layer 2 Interface as a Private VLAN Host Port

To configure a Layer 2 interface as a private VLAN host port, perform this task:
Command
Step 1
Router(config)# interface type
Step 2
Router(config-if)# switchport
Step 3
Router(config-if)# switchport mode private-vlan
{host | promiscuous}
Router(config-if)# no switchport mode
private-vlan
Step 4
Router(config-if)# switchport private-vlan
host-association primary_vlan_ID
secondary_vlan_ID
Router(config-if)# no switchport private-vlan
host-association
Step 5
Router(config-if)# end
Step 6
Router# show interfaces [type
switchport
1. type = ethernet, fastethernet, gigabitethernet, or tengigabitethernet
Catalyst 6500 Series Switch Cisco IOS Software Configuration Guide—Release 12.1 E
10-8
Enter a secondary_vlan_list parameter or use the add keyword with a secondary_vlan_list
parameter to map the secondary VLANs to the primary VLAN.
Use the remove keyword with a secondary_vlan_list parameter to clear the mapping between
secondary VLANs and the primary VLAN.
303 community
304 community
305 community
306 community
307 community
309 community
440 isolated
1
slot/port
1
slot/port]
Chapter 10
Purpose
Selects the LAN port to configure.
Configures the LAN port for Layer 2 switching:
You must enter the switchport command once
•
without any keywords to configure the LAN port as a
Layer 2 interface before you can enter additional
switchport commands with keywords.
• Required only if you have not entered the switchport
command already for the interface.
Configures the Layer 2 port as a private VLAN host port.
Clears private VLAN port configuration.
Associates the Layer 2 port with a private VLAN.
Clears the association.
Exits configuration mode.
Verifies the configuration.
Configuring Private VLANs
78-14099-04