hit counter script

Cisco ME 3400 Command Reference Manual page 707

Ethernet access switch
Table of Contents

Advertisement

Chapter 2 Cisco ME 3400 Ethernet Access Switch Cisco IOS Commands
While a port is part of the private-VLAN configuration, any EtherChannel configuration for it is inactive.
A private-VLAN port cannot be a secure port and should not be configured as a protected port.
For more information about private-VLAN interaction with other features, see the software
Note
configuration guide for this release.
If the port has STP enabled, we strongly recommend that you enable spanning tree Port Fast and
bridge-protocol-data-unit (BPDU) guard on isolated and community host ports to prevent STP loops due
to misconfigurations and to speed up STP convergence.
If you configure a port as a private-VLAN host port and you do not configure a valid private-VLAN
association by using the switchport private-vlan host-association interface configuration command,
the interface becomes inactive.
If you configure an NNI as a private-VLAN promiscuous port and you do not configure a valid private
VLAN mapping by using the switchport private-vlan mapping interface configuration command, the
interface becomes inactive.
Examples
This example shows how to configure an interface as a private-VLAN host port and associate it to
primary VLAN 20. The interface is a member of secondary isolated VLAN 501 and primary VLAN 20.
When you configure an NNI as a private VLAN host port, you should also enable BPDU guard and Port
Note
Fast by using the spanning-tree portfast bpduguard default global configuration command and the
spanning-tree portfast interface configuration command.
Switch# configure terminal
Switch(config)# interface fastethernet 0/1
Switch(config-if)# switchport mode private-vlan host
Switch(config-if)# switchport private-vlan host-association 20 501
Switch(config-if)# end
This example shows how to configure an NNI as a private VLAN promiscuous port and map it to a
private VLAN. The interface is a member of primary VLAN 20 and secondary VLANs 501 to 503 are
mapped to it.
Switch# configure terminal
Switch(config)# interface gigabitethernet 0/2
Switch(config-if)# switchport mode private-vlan promiscuous
Switch(config-if)# switchport private-vlan mapping 20 501-503
Switch(config-if)# end
You can verify private VLAN switchport mode by using the show interfaces interface-id switchport
privileged EXEC command.
OL-9640-10
Cisco ME 3400 Ethernet Access Switch Command Reference
switchport mode private-vlan
2-679

Advertisement

Table of Contents
loading

Table of Contents

Save PDF