Cisco Systems N3KC3064TFAL3 Manual De Usuario
Configuring an Interface as a Private VLAN Host Port
In PVLANs, host ports are part of the secondary VLANs, which are either community VLANs or isolated
VLANs. Configuring a PVLAN host port involves two steps. First, you define the port as a PVLAN host port
and then you configure a host association between the primary and secondary VLANs.
VLANs. Configuring a PVLAN host port involves two steps. First, you define the port as a PVLAN host port
and then you configure a host association between the primary and secondary VLANs.
We recommend that you enable BPDU Guard on all interfaces configured as a host ports.
Note
Before You Begin
Ensure that the PVLAN feature is enabled.
Procedure
Purpose
Command or Action
Enters configuration mode.
switch# configure terminal
Step 1
Selects the port to configure as a PVLAN host
port. This port can be on a FEX (identified by the
chassis option).
port. This port can be on a FEX (identified by the
chassis option).
switch(config)# interface type
[chassis/]slot/port
[chassis/]slot/port
Step 2
Configures the port as a host port for a PVLAN.
switch(config-if)# switchport mode
private-vlan host
private-vlan host
Step 3
Associates the port with the primary and secondary
VLANs of a PVLAN. The secondary VLAN can
be either an isolated or community VLAN.
VLANs of a PVLAN. The secondary VLAN can
be either an isolated or community VLAN.
switch(config-if)# switchport private-vlan
host-association {primary-vlan-id}
{secondary-vlan-id}
host-association {primary-vlan-id}
{secondary-vlan-id}
Step 4
(Optional)
Removes the PVLAN association from the port.
Removes the PVLAN association from the port.
switch(config-if)# no switchport
private-vlan host-association
private-vlan host-association
Step 5
This example shows how to configure Ethernet port 1/12 as a host port for a PVLAN and associate it to
primary VLAN 5 and secondary VLAN 101:
primary VLAN 5 and secondary VLAN 101:
switch#
configure terminal
switch(config)#
interface ethernet 1/12
switch(config-if)#
switchport mode private-vlan host
switch(config-if)#
switchport private-vlan host-association 5 101
Configuring an Interface as a Private VLAN Promiscuous Port
In a PVLAN domain, promiscuous ports are part of the primary VLAN. Configuring a promiscuous port
involves two steps. First, you define the port as a promiscuous port and then you configure the mapping
between a secondary VLAN and the primary VLAN.
involves two steps. First, you define the port as a promiscuous port and then you configure the mapping
between a secondary VLAN and the primary VLAN.
Before You Begin
Ensure that the PVLAN feature is enabled.
Cisco Nexus 3000 NX-OS Layer 2 Switching Configuration Guide, Release 5.0(3)U3(1)
OL-26590-01
45
Configuring Private VLANs
Configuring an Interface as a Private VLAN Host Port