Cisco 7604 User Manual

15-14
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
Chapter 15 Configuring Private VLANs
Configuring Private VLANs
When you map secondary VLANs to the Layer 3 VLAN interface of a primary VLAN, note the
following information:
• The private-vlan mapping interface configuration command only affects private VLAN ingress
traffic that is Layer 3-switched.
• The secondary_vlan_list parameter cannot contain spaces. It can contain multiple comma-separated
items. Each item can be a single private VLAN ID or a hyphenated range of private VLAN IDs.
• Enter a secondary_vlan_list parameter or use the add keyword with a secondary_vlan_list
parameter to map the secondary VLANs to the primary VLAN.
• Use the remove keyword with a secondary_vlan_list parameter to clear the mapping between
secondary VLANs and the primary VLAN.
This example shows how to permit routing of secondary VLAN ingress traffic from private VLANs 303
through 307, 309, and 440 and verify the configuration:
Router# configure terminal
Router(config)# interface vlan 202
Router(config-if)# private-vlan mapping add 303-307,309,440
Router(config-if)# end
Router# show interfaces private-vlan mapping
Interface Secondary VLAN Type
--------- -------------- -----------------
vlan202 303 community
vlan202 304 community
vlan202 305 community
vlan202 306 community
vlan202 307 community
vlan202 309 community
vlan202 440 isolated
Router#
Configuring a Layer 2 Interface as a Private VLAN Host Port
To configure a Layer 2 interface as a private VLAN host port, perform this task:
Command Purpose
Step 1
Router(config)# interface type
1
slot/port
Selects the LAN port to configure.
Step 2
Router(config-if)# switchport
Configures the LAN port for Layer 2 switching:
• Yo u m us t e n te r t he switchport command once
without any keywords to configure the LAN port as a
Layer 2 interface before you can enter additional
switchport commands with keywords.
• Required only if you have not entered the switchport
command already for the interface.
Step 3
Router(config-if)# switchport mode private-vlan
{host | promiscuous}
Configures the Layer 2 port as a private VLAN host port.
Router(config-if)# no switchport mode
private-vlan
Clears private VLAN port configuration.

Cisco 7604 Specifications

General

Brand	Cisco
Model	7604
Category	Network Router
Language	English