PVLAN Quick Notes

Private VLAN configuration:

vlan 300
private-vlan primary
private-vlan association 301-302
!
vlan 301
private-vlan isolated
!
vlan 302
private-vlan community

Port configuration:

interface GigabitEthernet1/0/1
    switchport private-vlan host-association 300 301
    switchport mode private-vlan host

What about the SVI?

interface Vlan300
    ip address 11.0.0.48 255.255.255.0

private-vlan mapping ?

    WORD Secondary VLAN IDs of the private VLAN SVI interface mapping
    add Add a VLAN to private VLAN list
    remove Remove a VLAN from private VLAN list

If we add a private-vlan mapping to the SVI it works like a promicuous port for all the secondary vlans mapped, reachable by both isolated and community ports:

private-vlan mapping 301-302
 
comments powered by Disqus