10-9
Catalyst 6500 Series Switch Cisco IOS Software Configuration Guide—Release 12.1 E
78-14099-04
Chapter 10 Configuring Private VLANs
Configuring Private VLANs
This example shows how to configure interface FastEthernet 5/1 as a private VLAN host port and verify
the configuration:
Router# configure terminal
Router(config)# interface fastethernet 5/1
Router(config-if)# switchport mode private-vlan host
Router(config-if)# switchport private-vlan host-association 202 303
Router(config-if)# end
Router# show interfaces fastethernet 5/1 switchport
Name: Fa5/1
Switchport: Enabled
Administrative Mode: private-vlan host
Operational Mode: down
Administrative Trunking Encapsulation: negotiate
Negotiation of Trunking: On
Access Mode VLAN: 1 (default)
Trunking Native Mode VLAN: 1 (default)
Administrative private-vlan host-association: 202 (VLAN0202) 303 (VLAN0303)
Administrative private-vlan mapping: none
Operational private-vlan: none
Trunking VLANs Enabled: ALL
Pruning VLANs Enabled: 2-1001
Capture Mode Disabled
Configuring a Layer 2 Interface as a Private VLAN Promiscuous Port
To configure a Layer 2 interface as a private VLAN promiscuous port, perform this task:
Command Purpose
Step 1 Router(config)# interface type1 slot/port
1. type = ethernet, fastethernet, gigabitethernet, or tengigabitethernet
Selects the LAN interface to configure.
Step 2 Router(config-if)# switchport Configures the LAN interface for Layer 2 switching:
• You must enter the switchport command once
without any keywords to configure the LAN interface
as a Layer 2 interface before you can enter additional
switchport commands with keywords.
• Required only if you have not entered the switchport
command already for the interface.
Step 3 Router(config-if)# switchport mode private-vlan
{host | promiscuous}
Configures the Layer 2 port as a private VLAN
promiscuous port.
Router(config-if)# no switchport mode
private-vlan
Clears the private VLAN port configuration.
Step 4 Router(config-if)# switchport private-vlan
mapping primary_vlan_ID {secondary_vlan_list |
add secondary_vlan_list | remove
secondary_vlan_list}
Maps the private VLAN promiscuous port to a primary
VLAN and to selected secondary VLANs.
Router(config-if)# no switchport private-vlan
mapping
Clears all mapping between the private VLAN
promiscuous port and the primary VLAN and any
secondary VLANs.
Step 5 Router(config-if)# end Exits configuration mode.
Step 6 Router# show interfaces [type1 slot/port]
switchport
Verifies the configuration.