Cisco Systems 3130 User Manual

This example shows how to configure an interface as a private-VLAN host port, associate it with a 
private-VLAN pair, and verify the configuration:

Switch# configure terminal 

Switch(config)# interface gigabitethernet1/0/2 

Switch(config-if)# switchport mode private-vlan host 

Switch(config-if)# switchport private-vlan host-association 20 501 

Switch(config-if)# end 

Switch# show interfaces gigabitethernet1/0/2 switchport 

Name: Gi1/0/2

Switchport: Enabled

Administrative Mode: private-vlan host

Operational Mode: private-vlan host

Administrative Trunking Encapsulation: negotiate

Operational Trunking Encapsulation: native

Negotiation of Trunking: Off

Access Mode VLAN: 1 (default)

Trunking Native Mode VLAN: 1 (default)

Administrative Native VLAN tagging: enabled

Voice VLAN: none

Administrative private-vlan host-association: 20 501

Administrative private-vlan mapping: none

Administrative private-vlan trunk native VLAN: none

Administrative private-vlan trunk Native VLAN tagging: enabled

Administrative private-vlan trunk encapsulation: dot1q

Administrative private-vlan trunk normal VLANs: none

Administrative private-vlan trunk private VLANs: none

Operational private-vlan:

20 501 

<output truncated>

switchport mode private-vlan host 

Configure the Layer 2 port as a private-VLAN host port. 

switchport private-vlan host-association 
primary_vlan_id secondary_vlan_id 

Associate the Layer 2 port with a private VLAN. 

end 

Return to privileged EXEC mode.

show interfaces [interface-id] switchport Verify 

the 

configuration.

(Optional) Save your entries in the switch startup 
configuration file.