Purpose
Command or Action
Associates the isolated trunk port with the primary and
secondary VLANs of a PVLAN. The secondary VLAN
switch(config-if)#
switchport
private-vlan association trunk
Step 5
should be an isolated VLAN. Only one isolated VLAN can
be mapped under a given primary VLAN.
{
primary-vlan-id
}
{
secondary-vlan-id
}
(Optional)
Removes the PVLAN association from the port. If the
primary-vlan-id
is not supplied, all PVLAN associations are
removed from the port.
switch(config-if)#
no switchport
private-vlan association trunk
[
primary-vlan-id
]
Step 6
The following example shows how to configure Ethernet interface 1/1 as an isolated trunk port for a PVLAN
and then associate the secondary VLANs to the primary VLAN:
switch#
configure terminal
switch(config)#
interface ethernet 1/1
switch(config-if)#
switchport
switch(config-if)#
switchport mode private-vlan trunk secondary
switch(config-if)#
switchport private-vlan association trunk 5 100
switch(config-if)#
switchport private-vlan association trunk 6 200
Configuring the Allowed VLANs for PVLAN Trunking Ports
Isolated trunk and promiscuous trunk ports can carry traffic from regular VLANs along with PVLANs.
Before You Begin
Ensure that the PVLAN feature is enabled.
Procedure
Purpose
Command or Action
Enters global configuration mode.
switch#
configure terminal
Step 1
Selects the port to configure as a PVLAN host port. This
port can be on a FEX (identified by the chassis option).
switch(config)#
interface type
[
chassis
/]
slot
/
port
Step 2
If this is a 10G breakout port, the
slot
/
port
syntax
is
QSFP-module
/
port
.
Note
Configures the interface as a Layer 2 interface and deletes
any configuration specific to Layer 3 on this interface.
switch(config-if)#
switchport
Step 3
Sets the allowed VLANs for the private trunk interface. The
default is to allow only mapped/associated VLANs on the
PVLAN trunk interface.
switch(config-if)#
switchport
private-vlan trunk allowed vlan
{
vlan-list
|
all
|
none
[
add
|
except
|
none
|
remove
{
vlan-list
}]}
Step 4
The primary VLANs do not need to be explicitly
added to the allowed VLAN list. They are added
automatically once there is a mapping between
primary and secondary VLANs.
Note
Cisco Nexus 6000 Series NX-OS Layer 2 Switching Configuration Guide, Release 7.x
40
Configuring Private VLANs
Configuring the Allowed VLANs for PVLAN Trunking Ports
