user manual

Configuring a Layer 2 Interface as a Private VLAN Promiscuous Port
Beginning in privileged EXEC mode, follow these steps to configure a Layer 2 interface as a private VLAN
promiscuous port and map it to primary and secondary VLANs:
Isolated and community VLANs are both secondary VLANs.Note
SUMMARY STEPS
1.
configure terminal
2.
interface interface-id
3.
switchport mode private-vlan promiscuous
4.
switchport private-vlan mapping primary_vlan_id {add | remove} secondary_vlan_list
5.
end
6.
show interfaces [interface-id] switchport
7.
copy running-config startup config
DETAILED STEPS
PurposeCommand or Action
Enters global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 1
Enters interface configuration mode for the Layer 2 interface to
be configured.
interface interface-id
Example:
Switch(config)# interface
Step 2
gigabitethernet1/0/2
Configures the Layer 2 port as a private VLAN promiscuous
port.
switchport mode private-vlan promiscuous
Example:
Switch(config-if)# switchport mode
Step 3
private-vlan promiscuous
Maps the private VLAN promiscuous port to a primary VLAN
and to selected secondary VLANs.
switchport private-vlan mapping primary_vlan_id
{add | remove} secondary_vlan_list
Step 4
Example:
Switch(config-if)# switchport private-vlan
The secondary_vlan_list parameter cannot contain spaces. It can
contain multiple comma-separated items. Each item can be a
Catalyst 2960-XR Switch VLAN Configuration Guide, Cisco IOS Release 15.0(2)EX1
98 OL-29440-01
Configuring Private VLANs
Configuring a Layer 2 Interface as a Private VLAN Promiscuous Port