12-6
Cisco ME 3400 Ethernet Access Switch Software Configuration Guide
OL-9639-06
Chapter 12 Configuring Private VLANs
Configuring Private VLANs
Configuring Private VLANs
These sections contain this configuration information:
Tasks for Configuring Private VLANs, page 12-6
Default Private-VLAN Configuration, page 12-6
Private-VLAN Configuration Guidelines, page 12-6
Configuring and Associating VLANs in a Private VLAN, page 12-10
Configuring a Layer 2 Interface as a Private-VLAN Host Port, page 12-11
Configuring a Layer 2 Interface as a Private-VLAN Promiscuous Port, page 12-13
Mapping Secondary VLANs to a Primary VLAN Layer 3 VLAN Interface, page 12-14

Tasks for Configuring Private VLANs

To configure a private VLAN, follow these steps:
Step 1 Create the primary and secondary VLANs and associate them. See the “Configuring and Associating
VLANs in a Private VLAN” section on page 12-10.
Note If the VLAN is not created already, the private-VLAN configuration process creates it.
Step 2 Configure interfaces to be isolated or community host ports, and assign VLAN membership to the host
port. See the “Configuring a Layer 2 Interface as a Private-VLAN Host Port” section on page 12-11.
Step 3 Configure NNIs as promiscuous ports, and map the promiscuous ports to the primary-secondary VLAN
pair. See the “Configuring a Layer 2 Interface as a Private-VLAN Promiscuous Port” section on
page 12-13.
Step 4 If inter-VLAN routing will be used, configure the primary SVI, and map secondary VLANs to the
primary. See the “Mapping Secondary VLANs to a Primary VLAN Layer 3 VLAN Interface” section on
page 12-14.
Step 5 Verify private-VLAN configuration.

Default Private-VLAN Configuration

No private VLANs are configured. Newly created VLANs are UNI-ENI isolated VLANs.

Private-VLAN Configuration Guidelines

Guidelines for configuring private VLANs fall into these categories:
Secondary and Primary VLAN Configuration, page 12-7
Private-VLAN Port Configuration, page 12-8
Limitations with Other Features, page 12-9