switchport private-vlan
You can map a promiscuous port to only one primary VLAN. If you enter the switchport private-vlan
mapping command on a promiscuous port that is already mapped to a primary and secondary VLAN,
the primary VLAN mapping is overwritten.
You can add or remove secondary VLANs from promiscuous port private-VLAN mappings by using the
add and remove keywords.
Entering the switchport private-vlan association host command has the same effect as entering the
switchport private-vlan host-association interface configuration command.
Entering the switchport private-vlan association mapping command has the same effect as entering
the switchport private-vlan mapping interface configuration command.
Examples
This example shows how to configure an interface as a private VLAN host port and associate it with
primary VLAN 20 and secondary VLAN 501:
Switch# configure terminal
Switch(config)# interface fastethernet 1/0/1
Switch(config-if)# switchport mode private-vlan host
Switch(config-if)# switchport private-vlan host-association 20 501
Switch(config-if)# end
This example shows how to configure an interface as a private-VLAN promiscuous port and map it to a
primary VLAN and secondary VLANs:
Switch# configure terminal
Switch(config)# interface fastethernet 1/0/2
Switch(config-if)# switchport mode private-vlan promiscuous
Switch(config-if)# switchport private-vlan mapping 20 501-502
Switch(config-if)# end
You can verify private-VLAN mapping by using the show interfaces private-vlan mapping privileged
EXEC command. You can verify private VLANs and interfaces configured on the switch stack by using
the show vlan private-vlan privileged EXEC command.
Related Commands
Command
show interfaces
mapping
show vlan
Catalyst 3750 Switch Command Reference
2-856
Description
private-vlan
Displays private VLAN mapping information for VLAN SVIs.
private-vlan
Displays all private VLAN relationships or types configured on the
switch stack.
Chapter 2 Catalyst 3750 Switch Cisco IOS Commands
OL-8552-07