Cisco Nexus 5000 Series Switch CLI Software Configuration Guide (OL-16597-01, July 2009)

PurposeCommand or Action
Selects the port to configure as a private VLAN host port.
This port can be on a Fabric Extender (identified by the
chassis option).
switch(config)# interface type
[chassis/]slot/port
Step 2
Sets the allowed VLANs for the private trunk interface.
The default is to allow only mapped/associated VLANs
on the private VLAN trunk interface.
switch(config-if)# switchport
private-vlan trunk allowed vlan
{vlan-list | all | none [add | except |
none | remove {vlan-list}]}
Step 3
The primary VLANs do not need to be explicitly
added to the allowed VLAN list. They are added
automatically once there is a mapping between
primary and secondary VLANs.
Note
This example shows how to add VLANs to the list of allowed VLANs on an Ethernet private VLAN trunk
port:
switch# configure terminal
switch(config)# interface ethernet 1/3
switch(config-if)# switchport private-vlan trunk allowed vlan 15-20
Configuring Native 802.1Q VLANs on Private VLANs
Typically, you configure 802.1Q trunks with a native VLAN ID, which strips tagging from all packets on that
VLAN. This configuration allows untagged traffic and control traffic to transit the Cisco Nexus 5000 Series
switch. Secondary VLANs cannot be configured with a native VLAN ID on promiscuous trunk ports. Primary
VLANs cannot be configured with a native VLAN ID on isolated trunk ports.
A trunk can carry the traffic of multiple VLANs. Traffic belonging to the native VLAN is not encapsulated
to transit the trunk. Traffic for other VLANs is encapsulated with tags which identify the VLAN the traffic
belongs to.
Note
Before You Begin
Ensure that the private VLAN feature is enabled.
Procedure
PurposeCommand or Action
Enters configuration mode.switch# configure terminal
Step 1
Selects the port to configure as a private VLAN
host port. This port can be on a Fabric Extender
(identified by the chassis option).
switch(config)# interface type
[chassis/]slot/port
Step 2
Sets the native VLAN ID for the private VLAN
trunk. The default is VLAN 1.
switch(config-if)# switchport private-vlan
trunk native {vlan vlan-id}
Step 3
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
OL-16597-01 99
Configuring a Private VLAN
Configuring Native 802.1Q VLANs on Private VLANs