Basic Pvlan Configuration Procedure - Cisco Catalyst 4500 Series Configuration Manual

Configuring PVLANs
•
•
•
•

Basic PVLAN Configuration Procedure

To configure a PVLAN, follow these basic steps:
Step 1 Set VTP mode to transparent. See the
Step 2 Create the secondary VLANs. See the
Create the primary VLAN. See the
Step 3
Associate the secondary VLAN to the primary VLAN. See the
Step 4
Primary VLAN" section on page
Note
Step 5 Configure an interface as an isolated or community host or trunk port. See the
Interface as a PVLAN Host Port" section on page 42-18
Isolated PVLAN Trunk Port" section on page
Step 6 Associate the isolated port or community port to the primary-secondary VLAN pair. See the
"Associating a Secondary VLAN with a Primary VLAN" section on page
Configure an interface as a promiscuous port. See the
Step 7
Promiscuous Port" section on page
Map the promiscuous port to the primary-secondary VLAN pair. See the
Step 8
Interface as a PVLAN Promiscuous Port" section on page
If you plan to use inter-VLAN routing, configure the primary SVI, and map secondary VLANs to the
Step 9
primary. See the
Verify private-VLAN configuration. See the
Step 10
Default Private-VLAN Configuration
No PVLANs are configured.
PVLAN Configuration Guidelines and Restrictions
When using (or configuring) PVLANs, consider these guidelines and restrictions:
•
Software Configuration Guide—Release IOS XE 3.3.0SG and IOS 15.1(1)SG
42-12
Configuring a Layer 2 Interface as an Isolated PVLAN Trunk Port, page 42-19
Configuring a Layer 2 Interface as a Promiscuous PVLAN Trunk Port, page 42-21
Permitting Routing of Secondary VLAN Ingress Traffic, page 42-23
Configuring PVLAN over EtherChannel, page 42-24
Only one isolated VLAN can be mapped to a primary VLAN, but more than one community (or
twoway-community) VLAN can be mapped to a primary VLAN.
"Permitting Routing of Secondary VLAN Ingress Traffic" section on page
To configure a PVLAN correctly, enable VTP in transparent mode in VTP version 1 and
VTP version 2. (VTP version 3 enables you to create it in server mode).
You cannot change the VTP mode to client or server for PVLANs.
"VLAN Trunking Protocol" section on page
"Configuring a VLAN as a PVLAN" section on page
"Configuring a VLAN as a PVLAN" section on page
42-16.
and
42-19.
"Configuring a Layer 2 Interface as a PVLAN
42-17.
42-17.
"Switch#" section on page
Chapter 42 Configuring Private VLANs
15-7.
"Associating a Secondary VLAN with a
"Configuring a Layer 2
"Configuring a Layer 2 Interface as an
42-16.
"Configuring a Layer 2
42-24.
42-15.
42-15.
42-23.
OL-25340-01