Cisco 7609 User Manual

10-7
Cisco 7600 Series Router Cisco IOS Software Configuration Guide—12.1E
78-14064-04
Chapter 10 Configuring Private VLANs
Configuring Private VLANs
Mapping Secondary VLANs to the Layer 3 VLAN Interface of a Primary VLAN
Note Isolated and community VLANs are both called secondary VLANs.
To map secondary VLANs to the Layer 3 VLAN interface of a primary VLAN to allow Layer 3 switching
of private VLAN ingress traffic, perform this task:
When you map secondary VLANs to the Layer 3 VLAN interface of a primary VLAN, note the
following syntax information:
• The private-vlan mapping interface configuration command only affects private VLAN ingress
traffic that is Layer 3 switched.
• The secondary_vlan_list parameter cannot contain spaces. It can contain multiple comma-separated
items. Each item can be a single private VLAN ID or a hyphenated range of private VLAN IDs.
• Enter a secondary_vlan_list parameter or use the add keyword with a secondary_vlan_list
parameter to map the secondary VLANs to the primary VLAN.
• Use the remove keyword with a secondary_vlan_list parameter to clear the mapping between
secondary VLANs and the primary VLAN.
This example shows how to permit routing of secondary VLAN ingress traffic from private VLANs 303
through 307, 309, and 440 and verify the configuration:
Router# configure terminal
Router(config)# interface vlan 202
Router(config-if)# private-vlan mapping add 303-307,309,440
Router(config-if)# end
Router# show interfaces private-vlan mapping
Interface Secondary VLAN Type
--------- -------------- -----------------
vlan202 303 community
vlan202 304 community
vlan202 305 community
vlan202 306 community
vlan202 307 community
vlan202 309 community
vlan202 440 isolated
Router#
Command Purpose
Step 1
Router(config)# interface vlan primary_vlan_ID
Enters interface configuration mode for the primary
VLAN.
Step 2
Router(config-if)# private-vlan mapping
{secondary_vlan_list | add secondary_vlan_list |
remove secondary_vlan_list}
Maps the secondary VLANs to the Layer 3 VLAN
interface of a primary VLAN to allow Layer 3 switching
of private VLAN ingress traffic.
Router(config-if)# [no] private-vlan mapping
Clears the mapping between the secondary VLANs and
the primary VLAN.
Step 3
Router(config-if)# end
Exits configuration mode.
Step 4
Router# show interface private-vlan mapping
Verifies the configuration.

Cisco 7609 Specifications

General

Brand	Cisco
Model	7609
Category	Network Router
Language	English