Cisco Systems N3KC3064TFAL3 Configuring a VLAN as a Private VLAN, community isolated primary

Configuring Private VLANs

Configuring a VLAN as a Private VLAN

Configuring a VLAN as a Private VLAN

To create a PVLAN, you first create a VLAN, and then configure that VLAN to be a PVLAN.

Before You Begin

Ensure that the PVLAN feature is enabled.

Procedure

	Command or Action	Purpose
Step 1	switch# configure terminal	Enters configuration mode.
Step 2	switch(config)# vlan {vlan-id	Places you into the VLAN configuration submode.
	vlan-range}
Step 3	switch(config-vlan)# private-vlan	Configures the VLAN as either a community, isolated,
	{community isolated primary}	or primary PVLAN. In a PVLAN, you must have one
		primary VLAN. You can have multiple community and
		isolated VLANs.
Step 4	switch(config-vlan)# no private-vlan	(Optional)
	{community isolated primary}	Removes the PVLAN configuration from the specified
		VLAN(s) and returns it to normal VLAN mode. If you
		delete either the primary or secondary VLAN, the ports
		that are associated with the VLAN become inactive.

This example shows how to assign VLAN 5 to a PVLAN as the primary VLAN:

switch# configure terminal switch(config)# vlan 5 switch(config-vlan)# private-vlan primary

This example shows how to assign VLAN 100 to a PVLAN as a community VLAN:

switch# configure terminal switch(config)# vlan 100 switch(config-vlan)# private-vlan community

This example shows how to assign VLAN 200 to a PVLAN as an insolated VLAN:

switch# configure terminal switch(config)# vlan 200 switch(config-vlan)# private-vlan isolated

Associating Secondary VLANs with a Primary Private VLAN

When you associate secondary VLANs with a primary VLAN, follow these guidelines:

•The secondary-vlan-listparameter cannot contain spaces. It can contain multiple comma-separated items. Each item can be a single secondary VLAN ID or a hyphenated range of secondary VLAN IDs.

Cisco Nexus 3000 NX-OS Layer 2 Switching Configuration Guide, Release 5.0(3)U3(1)

OL-26590-01 43