Operation Manual

Configuration Guide 208
Configuring Private VLAN Private VLAN Configurations
2.2.2 Configuring the Up-link Port
The switch requires that only access port can be added to a private VLAN.
Step 1 configure
Enter global configuration mode.
Step 2 interface { fastEthernet
port
| range fastEthernet
port-list
| gigabitEthernet
port
| range
gigabitEthernet
port-list
| ten-gigabitEthernet
port
| range ten-gigabitEthernet
port-list
}
Enter interface configuration mode.
port
: Specify the port to be configured.
port-list
: Specify the ID or the ID list of the port(s) for configuration.
Step 3 switchport private-vlan promiscuous
Configure the port type as Promiscuous.
Step 4 switchport private-vlan mapping
primary-vlan-id secondary-vlan-id
Add the specified port(s) to the private VLAN.
primary-vlan-id
: Specify the ID of the primary VLAN. The ID ranges from 2 to 4094.
secondary-vlan-id
: Specify the ID of the secondary VLAN. The ID ranges from 2 to 4094.
Step 5 show vlan private-vlan
Verify configurations of private VLAN.
Step 6 show vlan private-vlan interface [gigabitEthernet
port
| ten-gigabitEthernet
port
| port-
channel
port-channel-id
]
Verify private VLAN configurations of ports.
port
: Specify the port ID.
port-channel-id
: Specify the port-channel ID.
Step 7 end
Return to Privileged EXEC Mode.
Step 8 copy running-config startup-config
Save the settings in the configuration file.
Note
：
When configuring the up-link port, you only need to add the port to one private VLAN and set the
port type as Promiscuous. The switch will automatically add the port to private VLANs with the same
primary VLAN.
The following example shows how to configure the port type of port 1/0/2 as Promiscuous,
and add it to the private VLAN composed of primary VLAN 6 and secondary VLAN 5.
Switch#config