Cisco Cisco IOS Software Release 12.2(35)SE

This example shows how to configure an interface as a private VLAN host port and associate it with 
primary VLAN 20 and secondary VLAN 501:

Switch# configure terminal 

Switch(config)# interface fastethernet 0/1 

Switch(config-if)# switchport mode private-vlan host 

Switch(config-if)# switchport private-vlan host-association 20 501 

Switch(config-if)# end 

This example shows how to configure an interface as a private-VLAN promiscuous port and map it to a 
primary VLAN and secondary VLANs:

Switch# configure terminal 

Switch(config)# interface fastethernet 0/2 

Switch(config-if)# switchport mode private-vlan promiscuous 

Switch(config-if)# switchport private-vlan mapping 20 501-502 

Switch(config-if)# end 

You can verify private-VLAN mapping by using the show interfaces private-vlan mapping privileged 
EXEC command. You can verify private VLANs and interfaces configured on the switch by using the 
show vlan private-vlan privileged EXEC command.

This section contains these system message guide updates:

This section contains new system messages.

Error Message DOT1X_SWITCH-5-ERR_ADDING_ADDRESS: Unable to add address [enet] on 
[chars]

The client MAC address could not be added to the MAC address table because the 

hardware memory is full or the address is a secure address on another port. [enet] is the supplicant 
MAC address, and [chars] is the interface. This message might appear if the IEEE 802.1x feature is 
enabled.

If the hardware memory is full, remove some of the dynamic MAC addresses. 

If the client address is on another port, manually remove it from that port.

Displays private VLAN mapping information for VLAN SVIs.

Displays all private VLAN relationships or types configured on the 
switch.