Permitting Routing Of Secondary Vlan Ingress Traffic - Cisco Catalyst 4500 Series Configuration Manual

Chapter 42 Configuring Private VLANs
Capture Mode Disabled
Capture VLANs Allowed: ALL
Unknown unicast blocked: disabled
Unknown multicast blocked: disabled
Appliance trust: none

Permitting Routing of Secondary VLAN Ingress Traffic

Isolated, community VLANs, and twoway-community VLANs are called secondary VLANs.
Note
To permit routing of secondary VLAN ingress traffic, perform this task:
Command
Step 1
Switch# configure terminal
Step 2
Switch(config)# interface vlan primary_vlan_ID
Step 3
Switch(config-if)# [no] private-vlan mapping
primary_vlan_ID {secondary_vlan_list | add
secondary_vlan_list | remove secondary_vlan_list}
Step 4
Switch(config-if)# end
Step 5
Switch# show interface private-vlan mapping
When you permit routing on the secondary VLAN ingress traffic, note the following:
•
•
•
•
This example shows how to permit routing of secondary VLAN ingress traffic from PVLANs 303
through 307, 309, and 440 and verify the configuration:
Switch# configure terminal
Switch(config)# interface vlan 202
Switch(config-if)# private-vlan mapping add 303-307,309,440
Switch(config-if)# end
Switch# show interfaces private-vlan mapping
Interface Secondary VLAN Type
--------- -------------- -----------------
vlan202
vlan202
vlan202
vlan202
vlan202
OL-25340-01
The private-vlan mapping interface configuration command only affects PVLAN ingress traffic
that is Layer 3 switched.
The secondary_vlan_list parameter cannot contain spaces. It can contain multiple comma-separated
items. Each item can be a single PVLAN ID or a hyphenated range of PVLAN IDs.
Enter a secondary_vlan_list parameter or use the add keyword with a secondary_vlan_list
parameter to map the secondary VLANs to the primary VLAN.
Use the remove keyword with a secondary_vlan_list parameter to clear the mapping between
secondary VLANs and the primary VLAN.
303 community
304 community
305 community
306 community
307 community
Purpose
Enters global configuration mode.
Enters interface configuration mode for the primary
VLAN.
To permit routing on the secondary VLAN ingress traffic,
map the secondary VLAN to the primary VLAN.
You can use the no keyword to delete all associations
from the primary VLAN.
Exits configuration mode.
Verifies the configuration.
Software Configuration Guide—Release IOS XE 3.3.0SG and IOS 15.1(1)SG
Configuring PVLANs
42-23