12-13
Cisco ME 3400 EthernetAccess Switch SoftwareConfiguration Guide
78-17058-01
Chapter12 Configuring Private VLANs Configuring Private VLANs
Configuring a Layer 2 Interface as a Private-VLAN Promiscuous Port
You can configure only NNIs as promiscuous ports. Beginning in privileged EXEC mode, follow these
steps to configure a Layer 2 interface as a private-VLAN promiscuous p ort and m ap it to pr ima ry and
secondary VLANs:
Note Isolated and community VLANs are both secondary V LAN s.
When you configure a Layer 2 interface as a private-VLAN promiscuous por t, note this synt ax
information:
•The secondary_vlan_list parameter cannot contain spaces. It can co ntain multiple co mma-separa ted
items. Each item can be a single private-VLAN ID or a hyphenated rang e of private-VLAN ID s.
•Enter a secondary_vlan_list, or use the add keyword with a secondary_vlan_ list to m ap t he
secondary VLANs to the private-VLAN promiscuous port.
•Use the remove keyword with a secondary_vlan_list to clear the mapping between secondary
VLANs and the private-VLAN promiscuous port.
This example shows how to configure an NNI as a private-VLAN promiscuous port and map it to a
private VLAN. The interface is a member of primary VLAN 20 an d sec ond ary V L ANs 50 1 to 50 3 a re
mapped to it.
Switch# configure terminal
Switch(config)# interface gigabitethernet0/1
Switch(config-if)# switchport mode private-vlan promiscuous
Switch(config-if)# switchport private-vlan mapping 20 add 501-503
Switch(config-if)# end
Use the show vlan private-vlan or the show interface status privileged EXEC command to display
primary and secondary VLANs and private-VLAN ports on the switch.
Command Purpose
Step1 configure terminal Enter global configuration mode.
Step2 interface interface-id Enter interface configuration mode for the Layer 2
interface to be configured. The interface must be an NNI.
Note If the interface is a UNI, you must enter the
port-type nni interface configuration command
before configuring it as a promiscuous port.
Step3 switchport mode private-vlan promiscuous Configure the Layer 2 NNI port as a private-VLAN
promiscuous port.
Step4 switchport private-vlan mapping primary_vlan_id
{add | remove} secondary_vlan_list Map the private-VLAN promiscuous port to a primary
VLAN and to selected secondary VLANs.
Step5 end Return to privileged EXEC mode.
Step6 show interfaces [interface-id] switchport Verify the configuration.
Step7 copy running-config startup config (Optional) Save your entries in the switch startup
configuration file.