Cisco Catalyst 4500 Series Configuration Manual page 944

Configuring PVLANs
Command
Step 4
Switch(config-if)# [no] switchport private-vlan
association trunk primary_vlan_ID
secondary_vlan_ID
Step 5
Switch(config-if)# [no] switchport private-vlan
trunk allowed vlan vlan_list all | none | [add |
remove | except] vlan_atom[,vlan_atom...]
Step 6
Switch(config-if)# switchport private-vlan trunk
native vlan vlan_id
Step 7
Switch(config-if)# end
Step 8
Switch# show interfaces {fastethernet |
gigabitethernet | tengigabitethernet} slot/port
switchport
This example shows how to configure interface FastEthernet 5/2 as a secondary trunk port, and verify
the configuration:
Switch# configure terminal
Switch(config)# interface fastethernet 5/2
Switch(config-if)# switchport mode private-vlan trunk secondary
Switch(config-if)# switchport private-vlan trunk native vlan 10
Switch(config-if)# switchport private-vlan trunk allowed vlan 10. 3-4
Switch(config-if)# switchport private-vlan association trunk 3 301
Switch(config-if)# end
Switch# show interfaces fastethernet 5/2 switchport
Name: Fa5/2
Software Configuration Guide—Release IOS XE 3.3.0SG and IOS 15.1(1)SG
42-20
Switchport: Enabled
Administrative Mode: private-vlan trunk secondary
Operational Mode: private-vlan trunk secondary
Administrative Trunking Encapsulation: negotiate
Operational Trunking Encapsulation: dot1q
Negotiation of Trunking: On
Access Mode VLAN: 1 (default)
Chapter 42
Purpose
Configures association between primary VLANs and
secondary VLANs the PVLAN trunk port with a
PVLAN.
Note Multiple PVLAN pairs can be specified using
this command so that a PVLAN trunk port can
carry multiple secondary VLANs. If an
association is specified for the existing primary
VLAN, the existing association is replaced. If
there is no trunk association, any packets
received on secondary VLANs are dropped.
You can use the no keyword to delete all associations
from the primary VLAN.
Configures a list of allowed normal VLANs on a PVLAN
trunk port.
You can use the no keyword to remove all allowed
normal VLANs on a PVLAN trunk port.
Configures a VLAN to which untagged packets (as in
IEEE 802.1Q tagging) are assigned on a PVLAN trunk
port.
If there is no native VLAN configured, all untagged
packets are dropped.
If the native VLAN is a secondary VLAN and the port
does not have the association for the secondary VLAN,
the untagged packets are dropped.
You can use the no keyword to remove all native VLANs
on a PVLAN trunk port.
Exits configuration mode.
Verifies the configuration.
Configuring Private VLANs
OL-25340-01