Cisco WS-C3560E-48PD-SF Command Reference - Page 350
associate, community, isolated, primary, private-vlan, switchport mode
View all Cisco WS-C3560E-48PD-SF manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 350 highlights
private-vlan Chapter 2 Catalyst 3560 Switch Cisco IOS Commands You can associate a secondary (isolated or community) VLAN with only one primary VLAN. A primary VLAN can have one isolated VLAN and multiple community VLANs associated with it. • A secondary VLAN cannot be configured as a primary VLAN. • The secondary_vlan_list parameter cannot contain spaces. It can contain multiple comma-separated items. Each item can be a single private-VLAN ID or a hyphenated range of private-VLAN IDs. The list can contain one isolated VLAN and multiple community VLANs. • If you delete either the primary or secondary VLANs, the ports associated with the VLAN become inactive. A community VLAN carries traffic among community ports and from community ports to the promiscuous ports on the corresponding primary VLAN. An isolated VLAN is used by isolated ports to communicate with promiscuous ports. It does not carry traffic to other community ports or isolated ports with the same primary vlan domain. A primary VLAN is the VLAN that carries traffic from a gateway to customer end stations on private ports. Configure Layer 3 VLAN interfaces (SVIs) only for primary VLANs. You cannot configure Layer 3 VLAN interfaces for secondary VLANs. SVIs for secondary VLANs are inactive while the VLAN is configured as a secondary VLAN. The private-vlan commands do not take effect until you exit from VLAN configuration mode. Do not configure private-VLAN ports as EtherChannels. While a port is part of the private-VLAN configuration, any EtherChannel configuration for it is inactive. Do not configure a private VLAN as a Remote Switched Port Analyzer (RSPAN) VLAN. Do not configure a private VLAN as a voice VLAN. Do not configure fallback bridging on switches with private VLANs. Although a private VLAN contains more than one VLAN, only one STP instance runs for the entire private VLAN. When a secondary VLAN is associated with the primary VLAN, the STP parameters of the primary VLAN are propagated to the secondary VLAN. For information about configuring host ports and promiscuous ports, see the switchport mode private-vlan command. For more information about private-VLAN interaction with other features, see the software configuration guide for this release. 2-318 Catalyst 3560 Switch Command Reference 78-16405-05