Cisco Systems ME 3400 Configuring Private VLANs

12-6

Cisco ME 3400 Ethernet Access Switch Software Configuration Guide

OL-9639-06

Chapter 12 Configuring Private VLANs

Configuring Private VLANs

Configuring Private VLANs

These sections contain this configuration information:

• Tasks for Configuring Private VLANs, page 12-6

• Default Private-VLAN Configuration, page 12-6

• Private-VLAN Configuration Guidelines, page 12-6

• Configuring and Associating VLANs in a Private VLAN, page 12-10

• Configuring a Layer 2 Interface as a Private-VLAN Host Port, page 12-11

• Configuring a Layer 2 Interface as a Private-VLAN Promiscuous Port, page 12-13

• Mapping Secondary VLANs to a Primary VLAN Layer 3 VLAN Interface, page 12-14

To configure a private VLAN, follow these steps:

Step 1 Create the primary and secondary VLANs and associate them. See the “Configuring and Associating

VLANs in a Private VLAN” section on page 12-10.

Note If the VLAN is not created already, the private-VLAN configuration process creates it.

Step 2 Configure interfaces to be isolated or community host ports, and assign VLAN membership to the host

port. See the “Configuring a Layer 2 Interface as a Private-VLAN Host Port” section on page 12-11.

Step 3 Configure NNIs as promiscuous ports, and map the promiscuous ports to the primary-secondary VLAN

pair. See the “Configuring a Layer 2 Interface as a Private-VLAN Promiscuous Port” section on

page 12-13.

Step 4 If inter-VLAN routing will be used, configure the primary SVI, and map secondary VLANs to the

primary. See the “Mapping Secondary VLANs to a Primary VLAN Layer 3 VLAN Interface” section on

page 12-14.

Step 5 Verify private-VLAN configuration.

No private VLANs are configured. Newly created VLANs are UNI-ENI isolated VLANs.

Guidelines for configuring private VLANs fall into these categories:

• Secondary and Primary VLAN Configuration, page 12-7

• Private-VLAN Port Configuration, page 12-8

• Limitations with Other Features, page 12-9