12-14
Cisco ME 3400 EthernetAccess Switch SoftwareConfiguration Guide
78-17058-01
Chapter12 Configuring Private VLANs
Configuring Private VLANs
Mapping Secondary VLANs to a Primary VLAN Layer 3 VLAN Interface
If the switch is running the metro IP access image and the private VLAN will be used for inter-VLAN
routing, you configure an SVI for the primary VLAN and map sec ond ary VLA Ns to the SV I.
Note Isolated and community VLANs are both secondary V LAN s.
Beginning in privileged EXEC mode, follow these steps to map secondary VLANs to the SVI of a
primary VLAN to allow Layer 3 switching of private-VLAN traffic:
Note The private-vlan mapping interface configuration command onl y affects private-VL AN tr affic tha t i s
Layer 3 switched.
When you map secondary VLANs to the Layer 3 VLAN interface of a primary VLAN, note this syntax
information:
•The secondary_vlan_list parameter cannot contain spaces. It can co ntain multiple co mma-separa ted
items. Each item can be a single private-VLAN ID or a hyphenated rang e of private-VLAN ID s.
•Enter a secondary_vlan_list, or use the add keyword with a secondary_vlan_ list to map the
secondary VLANs to the primary VLAN.
•Use the remove keyword with a secondary_vlan_list to clear the mapping between secondary
VLANs and the primary VLAN.
This example shows how to map the interfaces of VLANs 501and 502 to primary V LAN 10, whi ch
permits routing of secondary VLAN incoming traffic from private VLANs 501 to 502:
Switch# configure terminal
Switch(config)# interface vlan 10
Switch(config-if)# private-vlan mapping 501-502
Switch(config-if)# end
Switch# show interfaces private-vlan mapping
Interface Secondary VLAN Type
--------- -------------- -----------------
vlan10 501 isolated
vlan10 502 community
Command Purpose
Step1 configure terminal Enter global configuration mode.
Step2 interface vlan primary_vlan_id Enter interface configuration mode for the primary
VLAN, and configure the VLAN as an SVI. The VLAN
ID range is 2 to 1001 and 1006 to 4094.
Step3 private-vlan mapping [add | remove]
secondary_vlan_list Map the secondary VLANs to the Layer 3 VLAN
interface of a primary VLAN to allow Layer 3 switching
of private-VLAN incoming traffic.
Step4 end Return to privileged EXEC mode.
Step5 show interface private-vlan mapping Verify the configuration.
Step6 copy running-config startup config (Optional) Save your entries in the switch startup
configuration file.