Web
– Click VLAN, 802.1Q VLAN, 802.1Q Tunnel Configuration or Tunnel Trunk
Configuration. Set the mode for a tunnel access port to 802.1Q Tunnel and a tu nnel
uplink port to 802.1Q Tunnel Uplink. Click Apply.
Figure 11-2 Tunnel Port Configuration
CLI – This example sets port 2 to tunnel access mode , and sets port 3 to tunnel
uplink mode.
Console(config)#interface ethernet 1/ 2
Console(config-if)#switchport dot 1q-tunn el mode a ccess
Console(config-if)#interface ethern et 1/3
Console(config-if)#switchport dot 1q-tunn el mode u plink
Console(config-if)#end
Console#show dot1q-tunnel
Current double-tagged
s
t
a
t
u
s
o
f
t
h
e
s
y
s
t
e
m
i
s
E
n
a
bled
27-134-1534-15
3
4
17
DownlinkPortsSecondary VLAN(private ports) x

11-18

VLAN Configuration

11
The dot1q-tunnel mode of the set interface 1/1 i s Norm al mo de , TPI D is 0x 9100 .
The dot1q-tunnel mode of the set interface 1/2 i s Acce ss mo de , TPI D is 0x 9100 .
The dot1q-tunnel mode of the set interface 1/3 i s Upli nk mo de , TPI D is 0x 9100 .
The dot1q-tunnel mode of the set interface 1/4 i s Norm al mo de , TPI D is 0x 9100 .
The dot1q-tunnel mode of the set interface 1/5 i s Norm al mo de , TPI D is 0x 9100 .
The dot1q-tunnel mode of the set interface 1/6 i s Norm al mo de , TPI D is 0x 9100 .
The dot1q-tunnel mode
o
f
t
h
e
s
e
t
i
n
t
e
r
f
a
c
e
1
/
7
i
s Norm
a
lm
o
d
e
,
T
P
I
D
i
s
0
x
9
1
0
0
.
.
.
.

Configuring Private VLANs

Private VLANs provide port-based security and isolation between ports within the
assigned VLAN. Data traffic on downlink ports can only be forwarded to, and from,
uplink ports. (Note that private VLANs and normal VLANs can e xist sim ultane ously
within the same switch.)
Uplink Ports Primary VLAN (promiscuous ports)