Basic Pvlan Configuration Procedure - Cisco Catalyst 4500 series Administration Manual

Configuring PVLANs
•
•
•
•

Basic PVLAN Configuration Procedure

To configure a PVLAN, follow these basic steps:
Step 1 Set VTP mode to transparent. See the
Step 2 Create the secondary VLANs. See the
Create the primary VLAN. See the
Step 3
Associate the secondary VLAN to the primary VLAN. See the
Step 4
Primary VLAN" section on page
Note
Step 5 Configure an interface as an isolated or community host or trunk port. See the
Interface as a PVLAN Host Port" section on page 44-18
Isolated PVLAN Trunk Port" section on page
Associate the isolated port or community port to the primary-secondary VLAN pair. See the
Step 6
"Associating a Secondary VLAN with a Primary VLAN" section on page
Configure an interface as a promiscuous port. See the
Step 7
Promiscuous Port" section on page
Map the promiscuous port to the primary-secondary VLAN pair. See the
Step 8
Interface as a PVLAN Promiscuous Port" section on page
If you plan to use inter-VLAN routing, configure the primary SVI, and map secondary VLANs to the
Step 9
primary. See the
Verify private-VLAN configuration. See the
Step 10
Default Private-VLAN Configuration
No PVLANs are configured.
PVLAN Configuration Guidelines and Restrictions
When using (or configuring) PVLANs, consider these guidelines and restrictions:
•
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
44-12
Configuring a Layer 2 Interface as an Isolated PVLAN Trunk Port, page 44-19
Configuring a Layer 2 Interface as a Promiscuous PVLAN Trunk Port, page 44-21
Permitting Routing of Secondary VLAN Ingress Traffic, page 44-23
Configuring PVLAN over EtherChannel, page 44-24
Only one isolated VLAN can be mapped to a primary VLAN, but more than one community (or
twoway-community) VLAN can be mapped to a primary VLAN.
"Permitting Routing of Secondary VLAN Ingress Traffic" section on page
To configure a PVLAN correctly, enable VTP in transparent mode in VTP version 1 and
VTP version 2. (VTP version 3 enables you to create it in server mode).
You cannot change the VTP mode to client or server for PVLANs.
"VLAN Trunking Protocol" section on page
"Configuring a VLAN as a PVLAN" section on page
"Configuring a VLAN as a PVLAN" section on page
44-16.
and
44-19.
"Configuring a Layer 2 Interface as a PVLAN
44-17.
44-17.
"Switch#" section on page
Chapter 44 Configuring Private VLANs
16-7.
"Associating a Secondary VLAN with a
"Configuring a Layer 2
"Configuring a Layer 2 Interface as an
44-16.
"Configuring a Layer 2
44-24.
44-15.
44-15.
44-23.
OL_28731-01