Cisco Systems N3KC3064TFAL3 Configuring an Interface as a Private VLAN Host Port, Procedure, Step

Models: N3KC3064TFAL3 N3KC3048TP1GE

1 164
Download 164 pages 5.98 Kb
Page 59
Image 59
Configuring an Interface as a Private VLAN Host Port

Configuring Private VLANs

Configuring an Interface as a Private VLAN Host Port

Configuring an Interface as a Private VLAN Host Port

In PVLANs, host ports are part of the secondary VLANs, which are either community VLANs or isolated VLANs. Configuring a PVLAN host port involves two steps. First, you define the port as a PVLAN host port and then you configure a host association between the primary and secondary VLANs.

Note We recommend that you enable BPDU Guard on all interfaces configured as a host ports.

Before You Begin

Ensure that the PVLAN feature is enabled.

Procedure

 

Command or Action

Purpose

Step 1

switch# configure terminal

Enters configuration mode.

Step 2

switch(config)# interface type

Selects the port to configure as a PVLAN host

 

[chassis/]slot/port

port. This port can be on a FEX (identified by the

 

 

chassis option).

Step 3

switch(config-if)# switchport mode

Configures the port as a host port for a PVLAN.

 

private-vlan host

 

Step 4

switch(config-if)#switchport private-vlan

Associates the port with the primary and secondary

 

host-association {primary-vlan-id}

VLANs of a PVLAN. The secondary VLAN can

 

{secondary-vlan-id}

be either an isolated or community VLAN.

Step 5

switch(config-if)# no switchport

(Optional)

 

private-vlan host-association

Removes the PVLAN association from the port.

This example shows how to configure Ethernet port 1/12 as a host port for a PVLAN and associate it to primary VLAN 5 and secondary VLAN 101:

switch# configure terminal switch(config)# interface ethernet 1/12 switch(config-if)#switchport mode private-vlan host switch(config-if)#switchport private-vlan host-association 5 101

Configuring an Interface as a Private VLAN Promiscuous Port

In a PVLAN domain, promiscuous ports are part of the primary VLAN. Configuring a promiscuous port involves two steps. First, you define the port as a promiscuous port and then you configure the mapping between a secondary VLAN and the primary VLAN.

Before You Begin

Ensure that the PVLAN feature is enabled.

Cisco Nexus 3000 NX-OS Layer 2 Switching Configuration Guide, Release 5.0(3)U3(1)

OL-26590-01

45

Page 59
Image 59
Cisco Systems N3KC3064TFAL3 Configuring an Interface as a Private VLAN Host Port, private-vlan host, Before You Begin