PVLAN Quick Notes
Private VLAN configuration:
vlan 300
private-vlan primary
private-vlan association 301-302
!
vlan 301
private-vlan isolated
!
vlan 302
private-vlan community
Port configuration:
interface GigabitEthernet1/0/1
switchport private-vlan host-association 300 301
switchport mode private-vlan host
What about the SVI?
interface Vlan300
ip address 11.0.0.48 255.255.255.0
private-vlan mapping ?
WORD Secondary VLAN IDs of the private VLAN SVI interface mapping
add Add a VLAN to private VLAN list
remove Remove a VLAN from private VLAN list
If we add a private-vlan mapping to the SVI it works like a promicuous port for all the secondary vlans mapped, reachable by both isolated and community ports:
private-vlan mapping 301-302