Configuring a Layer 2 Interface as a Private VLAN Promiscuous Port
Beginningin privileged EXEC mode, follow these steps to configure a Layer 2 interface as a private VLAN
promiscuousport and map it to primary and secondary VLANs:
Isolatedand community VLANs areboth secondaryVLANs.Note
SUMMARY STEPS
1. configureterminal
2. interfaceinterface-id
3. switchportmode private-vlan promiscuous
4. switchportprivate-vlan mapping primary_vlan_id {add |remove}secondary_vlan_list
5. end
6. showinterfaces [interface-id]switchport
7. copyrunning-config startup config
DETAILED STEPS
PurposeCommand or Action
Entersglobal configuration mode.configureterminal
Example:
Switch# configure terminal
Step 1
Entersinterface configuration mode for the Layer 2 interface to
beconfigured.
interfaceinterface-id
Example:
Switch(config)# interface
Step 2
gigabitethernet1/0/2
Configuresthe Layer 2 port as a private VLAN promiscuous
port.
switchportmode private-vlan promiscuous
Example:
Switch(config-if)# switchport mode
Step 3
private-vlan promiscuous
Mapsthe privateVLAN promiscuous port toa primaryVLAN
andto selectedsecondary VLANs.
switchportprivate-vlan mapping primary_vlan_id
{add|remove}secondary_vlan_list
Step 4
Example:
Switch(config-if)# switchport private-vlan
Thesecondary_vlan_list parameter cannot contain spaces. It can
containmultiple comma-separated items. Eachitem can bea
Catalyst 2960-XR Switch VLAN Configuration Guide, Cisco IOS Release 15.0(2)EX1
98 OL-29440-01
Configuring Private VLANs
Configuring a Layer 2 Interface as a Private VLAN Promiscuous Port