Cisco Systems N3KC3064TFAL3, N3KC3048TP1GE Configuring an Interface as a Private Vlan Host Port

Configuring Private VLANs

Configuring an Interface as a Private VLAN Host Port

Configuring an Interface as a Private VLAN Host Port

In PVLANs, host ports are part of the secondary VLANs, which are either community VLANs or isolated VLANs. Configuring a PVLAN host port involves two steps. First, you define the port as a PVLAN host port and then you configure a host association between the primary and secondary VLANs.

Note We recommend that you enable BPDU Guard on all interfaces configured as a host ports.

Before You Begin

Ensure that the PVLAN feature is enabled.

Procedure

	Command or Action	Purpose
Step 1	switch# configure terminal	Enters configuration mode.
Step 2	switch(config)# interface type	Selects the port to configure as a PVLAN host
	[chassis/]slot/port	port. This port can be on a FEX (identified by the
		chassis option).
Step 3	switch(config-if)# switchport mode	Configures the port as a host port for a PVLAN.
	private-vlan host
Step 4	switch(config-if)#switchport private-vlan	Associates the port with the primary and secondary
	host-association {primary-vlan-id}	VLANs of a PVLAN. The secondary VLAN can
	{secondary-vlan-id}	be either an isolated or community VLAN.
Step 5	switch(config-if)# no switchport	(Optional)
	private-vlan host-association	Removes the PVLAN association from the port.

This example shows how to configure Ethernet port 1/12 as a host port for a PVLAN and associate it to primary VLAN 5 and secondary VLAN 101:

switch# configure terminal switch(config)# interface ethernet 1/12 switch(config-if)#switchport mode private-vlan host switch(config-if)#switchport private-vlan host-association 5 101

Configuring an Interface as a Private VLAN Promiscuous Port

In a PVLAN domain, promiscuous ports are part of the primary VLAN. Configuring a promiscuous port involves two steps. First, you define the port as a promiscuous port and then you configure the mapping between a secondary VLAN and the primary VLAN.

Before You Begin

Ensure that the PVLAN feature is enabled.

Cisco Nexus 3000 NX-OS Layer 2 Switching Configuration Guide, Release 5.0(3)U3(1)

OL-26590-01 45