Purpose
Command or Action
The following example shows how to add VLANs to the list of allowed VLANs on an Ethernet PVLAN trunk
port:
switch#
configure terminal
switch(config)#
interface ethernet 1/3
switch(config-if)#
switchport
switch(config-if)#
switchport private-vlan trunk allowed vlan 15-20
Configuring Native 802.1Q VLANs on Private VLANs
Typically, you configure 802.1Q trunks with a native VLAN ID, which strips tagging from all packets on that
VLAN. This configuration allows untagged traffic and control traffic to transit the . Secondary VLANs cannot
be configured with a native VLAN ID on promiscuous trunk ports. Primary VLANs cannot be configured
with a native VLAN ID on isolated trunk ports.
A trunk can carry the traffic of multiple VLANs. Traffic that belongs to the native VLAN is not encapsulated
to transit the trunk. Traffic for other VLANs is encapsulated with tags that identify the VLAN that the
traffic belongs to.
Note
Before You Begin
Ensure that the PVLAN feature is enabled.
Procedure
Purpose
Command or Action
Enters global configuration mode.
switch#
configure terminal
Step 1
Selects the port to configure as a PVLAN host port.
This port can be on a FEX (identified by the chassis
option).
switch(config)#
interface type
[
chassis
/]
slot
/
port
Step 2
If this is a 10G breakout port, the
slot
/
port
syntax is
QSFP-module
/
port
.
Note
Configures the interface as a Layer 2 interface and
deletes any configuration specific to Layer 3 on this
interface.
switch(config-if)#
switchport
Step 3
Sets the native VLAN ID for the PVLAN trunk. The
default is VLAN 1.
switch(config-if)#
switchport
private-vlan trunk native
{
vlan
vlan-id
}
Step 4
(Optional)
Removes the native VLAN ID from the PVLAN trunk.
switch(config-if)#
no switchport
private-vlan trunk native
{
vlan
vlan-id
}
Step 5
Cisco Nexus 6000 Series NX-OS Layer 2 Switching Configuration Guide, Release 7.x
41
Configuring Private VLANs
Configuring Native 802.1Q VLANs on Private VLANs
