S e n d f e e d b a c k t o n x 5 0 0 0 - d o c f e e d b a c k @ c i s c o . c o m
7-8
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
OL-16597-01
Chapter 7 Configuring Private VLANs
Configuring a Private VLAN
•
Enter a
secondary-vlan-list
or use the
add
keyword with a
secondary-vlan-list
to associate
secondary VLANs with a primary VLAN.
•
Use the
remove
keyword with a
secondary-vlan-list
to clear the association between secondary
VLANs and a primary VLAN.
•
You change the association between a secondary and primary VLAN by removing the existing
association and then adding the desired association.
If you delete either the primary or secondary VLAN, the ports that are associated with the VLAN become
inactive. When you enter the
no private-vlan
command, the VLAN returns to the normal VLAN mode.
All primary and secondary associations on that VLAN are suspended, but the interfaces remain in private
VLAN mode. If you again convert the specified VLAN to private VLAN mode, the original associations
are reinstated.
If you enter the
no vlan
command for the primary VLAN, all private VLAN associations with that
VLAN are lost. However, if you enter the
no vlan
command for a secondary VLAN, the private VLAN
associations with that VLAN are suspended and return when you recreate the specified VLAN and
configure it as the previous secondary VLAN.
Ensure that the private VLAN feature is enabled.
To associate secondary VLANs with a primary VLAN, perform this task:
This example shows how to associate community VLANs 100 through 103 and isolated VLAN 109 with
primary VLAN 5:
switch#
configure terminal
switch(config)#
vlan 5
switch(config-vlan)#
private-vlan association 100-103, 109
To remove all associations from the private VLAN, perform this task:
Configuring an Interface as a Private VLAN Host Port
You can configure an interface as a private VLAN host port. In private VLANs, host ports are part of the
secondary VLANs, which are either community VLANs or isolated VLANs. You then associate the host
port with both the primary and secondary VLANs.
Command
Purpose
Step 1
switch#
configure terminal
Enters configuration mode.
Step 2
switch(config)#
vlan
primary-vlan-id
Enter the number of the primary VLAN that you are
working in for the private VLAN configuration.
Step 3
switch(config-vlan)#
private-vlan
association
{[
add
]
secondary-vlan-list
|
remove
secondary-vlan-list
}
Associates the secondary VLANs with the primary
VLAN.
Command
Purpose
switch(config-vlan)#
no private-vlan
association
Removes all associations from the primary VLAN
and returns it to normal VLAN mode.
Summary of Contents for N5010P-N2K-BE
Page 50: ...Se n d f e e d b a ck t o n x 5 0 0 0 d o c f e e d b a ck c i s c o c o m ...
Page 102: ...Se n d f e e d b a ck t o n x 5 0 0 0 d o c f e e d b a ck c i s c o c o m ...
Page 240: ...Se n d f e e d b a ck t o n x 5 0 0 0 d o c f e e d b a ck c i s c o c o m ...
Page 312: ...Se n d f e e d b a ck t o n x 5 0 0 0 d o c f e e d b a ck c i s c o c o m ...
Page 400: ...Se n d f e e d b a ck t o n x 5 0 0 0 d o c f e e d b a ck c i s c o c o m ...
Page 418: ...Se n d f e e d b a ck t o n x 5 0 0 0 d o c f e e d b a ck c i s c o c o m ...
Page 436: ...Se n d f e e d b a ck t o n x 5 0 0 0 d o c f e e d b a ck c i s c o c o m ...
Page 658: ...Se n d f e e d b a ck t o n x 5 0 0 0 d o c f e e d b a ck c i s c o c o m ...
