Configuring Private VLANs
•
For more information about switch stacks, see
Configuring Private VLANs
These sections contain this configuration information:
•
•
•
•
•
•
•
Tasks for Configuring Private VLANs
To configure a private VLAN, perform these steps:
Set VTP mode to transparent.
Step 1
Create the primary and secondary VLANs and associate them. See the
Step 2
VLANs in a Private VLAN" section on page
Note
Configure interfaces to be isolated or community host ports, and assign VLAN membership to the host
Step 3
port. See the
Configure interfaces as promiscuous ports, and map the promiscuous ports to the primary-secondary
Step 4
VLAN pair. See the
page
Step 5
If inter-VLAN routing will be used, configure the primary SVI, and map secondary VLANs to the
primary. See the
page
Verify private-VLAN configuration.
Step 6
Default Private-VLAN Configuration
No private VLANs are configured.
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
1-6
If two stacks merge, private VLANs on the winning stack are not affected, but private-VLAN
configuration on the losing switch is lost when that switch reboots.
Tasks for Configuring Private VLANs, page 1-6
Default Private-VLAN Configuration, page 1-6
Private-VLAN Configuration Guidelines, page 1-7
Configuring and Associating VLANs in a Private VLAN, page 1-10
Configuring a Layer 2 Interface as a Private-VLAN Host Port, page 1-11
Configuring a Layer 2 Interface as a Private-VLAN Promiscuous Port, page 1-13
Mapping Secondary VLANs to a Primary VLAN Layer 3 VLAN Interface, page 1-13
If the VLAN is not created already, the private-VLAN configuration process creates it.
"Configuring a Layer 2 Interface as a Private-VLAN Host Port" section on page
"Configuring a Layer 2 Interface as a Private-VLAN Promiscuous Port" section on
1-13.
"Mapping Secondary VLANs to a Primary VLAN Layer 3 VLAN Interface" section on
1-13.
Chapter 1
Chapter 1, "Managing Switch Stacks."
"Configuring and Associating
1-10.
Configuring Private VLANs
1-11.
OL-25303-03