12-6
Cisco ME 3400 EthernetAccess Switch SoftwareConfiguration Guide
78-17058-01
Chapter12 Configuring Private VLANs
Configuring Private VLANs
•Configuring a Layer 2 Interface as a Private-VLAN Promiscuous Port, page 12-13
•Mapping Secondary VLANs to a Primary VLAN Layer 3 VLAN In terfac e, p age 12- 14
Tasks for Configuring Private VLANs
To configure a private VLAN, perform these steps:
Step1 Create the primary and secondary VLANs and associate them. See the “Configuring and Associating
VLANs in a Private VLAN” section on page12-10.
Note If the VLAN is not created already, the private-VLAN configuration process creates it.
Step2 Configure interfaces to be isolated or community host ports, and assign VLAN membership to the host
port. See the “Configuring a Layer 2 Interface as a Private-VLAN Host Port” section on page 12-12.
Step3 Configure NNIs as promiscuous ports, and map the promiscuous ports to the primary-secon dary VLAN
pair. See the “Configuring a Layer 2 Interface as a Private-VLAN Promiscuous Port” section on
page 12-13.
Step4 If inter-VLAN routing will be used, configure the primary SVI, and map secondary VLANs to the
primary. See the “Mapping Secondary VLANs to a Primary VLAN Layer 3 VLAN Interface” section on
page 12-14.
Step5 Verify private-VLAN configuration.
Default Private-VLAN Configuration
No private VLANs are configured. Newly created VLANs are UNI isolated VLANs.
Private-VLAN Configuration Guidelines
Guidelines for configuring private VLANs fall into these categories:
•Secondary and Primary VLAN Configuration, page 12-7
•Private-VLAN Port Configuration, page 12-8
•Limitations with Other Features, page 12-9