Cisco Systems 3750E manual Interface vlan primaryvlanid, Private-vlan mapping add remove, 16-14

Chapter 16 Configuring Private VLANs

Configuring Private VLANs

Mapping Secondary VLANs to a Primary VLAN Layer 3 VLAN Interface

If the private VLAN will be used for inter-VLAN routing, you configure an SVI for the primary VLAN and map secondary VLANs to the SVI.

Note Isolated and community VLANs are both secondary VLANs.

Beginning in privileged EXEC mode, follow these steps to map secondary VLANs to the SVI of a primary VLAN to allow Layer 3 switching of private-VLAN traffic:

	Command	Purpose
Step 1
	configure terminal	Enter global configuration mode.
Step 2
	interface vlan primary_vlan_id	Enter interface configuration mode for the primary
		VLAN, and configure the VLAN as an SVI. The VLAN
		ID range is 2 to 1001 and 1006 to 4094.
Step 3
	private-vlan mapping [add remove]	Map the secondary VLANs to the Layer 3 VLAN
	secondary_vlan_list	interface of a primary VLAN to allow Layer 3 switching
		of private-VLAN ingress traffic.
Step 4
	end	Return to privileged EXEC mode.
Step 5
	show interface private-vlan mapping	Verify the configuration.
Step 6
	copy running-config startup config	(Optional) Save your entries in the switch startup
		configuration file.

Note The private-vlan mapping interface configuration command only affects private-VLAN traffic that is Layer 3 switched.

When you map secondary VLANs to the Layer 3 VLAN interface of a primary VLAN, note this syntax information:

•The secondary_vlan_list parameter cannot contain spaces. It can contain multiple comma-separated items. Each item can be a single private-VLAN ID or a hyphenated range of private-VLAN IDs.

•Enter a secondary_vlan_list, or use the add keyword with a secondary_vlan_list to map the secondary VLANs to the primary VLAN.

•Use the remove keyword with a secondary_vlan_list to clear the mapping between secondary VLANs and the primary VLAN.

This example shows how to map the interfaces of VLANs 501and 502 to primary VLAN 10, which permits routing of secondary VLAN ingress traffic from private VLANs 501 to 502:

Switch# configure terminal

Switch(config)# interface vlan 10

Switch(config-if)#private-vlan mapping 501-502

Switch(config-if)# end

Switch# show interfaces private-vlan mapping

		Interface	Secondary VLAN	Type
---------			--------------	-----------------
		vlan10	501	isolated
		vlan10	502	community
		Catalyst 3750-E and 3560-E Switch Software Configuration Guide
	16-14			OL-9775-02