Chapter 15
Configuring Private VLANs
When you associate secondary VLANs with a primary VLAN, note the following information:
•
•
•
•
•
•
This example shows how to associate community VLANs 303 through 307 and 309 and isolated VLAN
440 with primary VLAN 202 and verify the configuration:
Router# configure terminal
Router(config)# vlan 202
Router(config-vlan)# private-vlan association 303-307,309,440
Router(config-vlan)# end
Router# show vlan private-vlan
Primary Secondary Type
------- --------- ----------------- ------------------------------------------
202
202
202
202
202
202
202
Mapping Secondary VLANs to the Layer 3 VLAN Interface of a Primary VLAN
Isolated and community VLANs are both called secondary VLANs.
Note
To map secondary VLANs to the Layer 3 VLAN interface of a primary VLAN to allow Layer 3 switching
of private VLAN ingress traffic, perform this task:
Command
Step 1
Router(config)# interface vlan primary_vlan_ID
Step 2
Router(config-if)# private-vlan mapping
{ secondary_vlan_list | add secondary_vlan_list |
remove secondary_vlan_list }
Router(config-if)# [no] private-vlan mapping
Step 3
Router(config-if)# end
Step 4
Router# show interface private-vlan mapping
OL-4266-08
The secondary_vlan_list parameter cannot contain spaces. It can contain multiple comma-separated
items. Each item can be a single private VLAN ID or a hyphenated range of private VLAN IDs.
The secondary_vlan_list parameter can contain multiple community VLAN IDs.
The secondary_vlan_list parameter can contain only one isolated VLAN ID.
Enter a secondary_vlan_list or use the add keyword with a secondary_vlan_list to associate
secondary VLANs with a primary VLAN.
Use the remove keyword with a secondary_vlan_list to clear the association between secondary
VLANs and a primary VLAN.
The command does not take effect until you exit VLAN configuration submode.
303
community
304
community
305
community
306
community
307
community
309
community
440
isolated
308
community
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
Interfaces
Purpose
Enters interface configuration mode for the primary
VLAN.
Maps the secondary VLANs to the Layer 3 VLAN
interface of a primary VLAN to allow Layer 3 switching
of private VLAN ingress traffic.
Clears the mapping between the secondary VLANs and
the primary VLAN.
Exits configuration mode.
Verifies the configuration.
Configuring Private VLANs
15-13