Guidelines and Limitations for Private VLANs
• Configure selected interfaces connected to end stations as isolated ports to prevent any communication.
• Configure interfaces connected to default gateways and selected end stations (for example, backup
Guidelines and Limitations for Private VLANs
When configuring PVLANs, follow these guidelines:
• You must have already created the VLAN before you can assign the specified VLAN as a private VLAN.
• You must enable PVLANs before the switch can apply the PVLAN functionality.
• You cannot disable PVLANs if the switch has any operational ports in a PVLAN mode.
• Enter the private-vlan synchronize command from within the Multiple Spanning Tree (MST) region
Configuring a Private VLAN
Enabling Private VLANs
You must enable private VLANs on the switch to use the private VLAN functionality.
The private VLAN commands do not appear until you enable the private VLAN feature.
Note
SUMMARY STEPS
1. switch# configure terminal
2. switch(config)# feature private-vlan
3. (Optional) switch(config)# no feature private-vlan
DETAILED STEPS
Command or Action
Step 1
switch# configure terminal
Step 2
switch(config)# feature private-vlan
Step 3
switch(config)# no feature private-vlan
Cisco Nexus 3000 Series NX-OS Layer 2 Switching Configuration Guide, Release 5.0(3)U1(1)
38
For example, if the end stations are servers, this configuration prevents communication between the
servers.
servers) as promiscuous ports to allow all end stations access to a default gateway.
definition to map the secondary VLANs to the same MST instance as the primary VLAN.
Purpose
Enters configuration mode.
Enables the private VLAN feature on the switch.
(Optional)
Disables the private VLAN feature on the switch.
You cannot disable private VLANs if there are operational
Note
ports on the switch that are in private VLAN mode.
Configuring Private VLANs