
10-16
Catalyst 4500 Series, Catalyst 2948G, Catalyst 2948G-GE-TX, and Catalyst 2980G Switches Software Configuration Guide—Release 8.2GLX
78-15908-01
Chapter 10 Configuring VLANs
Configuring Private VLANs
Verifying Auxiliary VLAN Configuration
To verify auxiliary VLAN configuration status, perform this task in privileged mode:
This example shows how to verify auxiliary VLAN configuration status:
Console> show port auxiliaryvlan 123
AuxiliaryVlan AuxVlanStatus Mod/Ports
------------- ------------- -------------------------
222 active 1/2,2/1-3
Console>
Configuring Private VLANs
A private VLAN is a VLAN that you configure to have some Layer 2 isolation from other ports within
the same private VLAN. Ports belonging to a private VLAN are associated with a common set of
supporting VLANs that are used to create the private VLAN structure. You can configure private VLANs
and normal VLANs from the same Catalyst 4500 series switch.
The three types of private VLAN ports are as follows:
•
A promiscuous port communicates with all other private VLAN ports and is the port that you use to
communicate with routers, LocalDirector, the CSS11000, backup servers, and administrative
workstations.
Note
If a broadcast or multicast packet comes from the promiscuous port, it is sent to all the ports
in the private VLAN domain (all the community and isolated ports).
•
An isolated port has complete Layer 2 separation, including broadcasts, from other ports within the
same private VLAN with the exception of the promiscuous port.
•
Community ports communicate among themselves and with their promiscuous ports. These ports are
isolated at Layer 2 from all other ports in other communities or isolated ports within their private
VLAN. Broadcasts propagate only between associated community ports and the promiscuous port.
Table 10-3
Keyword Descriptions
Keyword
Action
dot1p
Specify that the phone send packets with 802.1p priority 5.
untagged
Specify that the phone send untagged packets.
none
Specify that the switch not send any auxiliary VLAN information in the CDP
packets from that port.
Task
Command
Verify auxiliary VLAN configuration status.
show port auxiliaryvlan {vlan | untagged |
dot1p | none}