Configuring the primary VLAN

To configure a primary VLAN, enter commands such as the following.

device(config)# vlan 7
device(config-vlan-7)# pvlan type primary
device(config-vlan-7)# untagged ethernet 1/3/2
device(config-vlan-7)# pvlan mapping 901 ethernet 1/3/2

These commands create port-based VLAN 7, add port 1/3/2 as an untagged port, identify the VLAN as the primary VLAN in a PVLAN, and map the other secondary VLANs to the ports in this VLAN.

To map the secondary VLANs to the primary VLAN and to configure the tagged switch link port, enter commands such as the following.

device(config)# vlan 100
device(config-vlan-100)# tagged ethernet 1/1/10 to 1/1/11
device(config-vlan-100)# pvlan type primary
device(config-vlan-100)# untagged ethernet 1/1/4
device(config-vlan-100)# pvlan mapping 101 ethernet 1/1/4
device(config-vlan-100)# pvlan mapping 102 ethernet 1/1/4
device(config-vlan-100)# pvlan pvlan-trunk 101 ethernet 1/1/10 to 1/1/11

These commands create port-based VLAN 100, add port 1/1/10 to 1/1/11 as a tagged port, identify the VLAN as the primary VLAN in a PVLAN, map the other secondary VLANs to the ports in this VLAN, and configure the tagged switch link port.

Syntax: untagged ethernet [stack-unit/slotnum/]portnum [to [stack-unit/slotnum/]portnum | ethernet [stack-unit/slotnum/]portnum]

or

Syntax: tagged ethernet [stack-unit/slotnum/]portnum [to [stack-unit/slotnum/]portnum | ethernet[stack-unit/slotnum/]portnum]

Syntax: [no] pvlan type community | isolated | primary

Syntax: [no] pvlan mapping vlan-id ethernet [stack-unit/slotnum/]portnum

Syntax: [no] pvlan pvlan-trunk vlan-id ethernet [stack-unit/slotnum/]portnum [to [stack-unit/slotnum/]portnum]

The untagged or tagged command adds the ports to the VLAN.

The pvlan type command specifies that this port-based VLAN is a PVLAN. Specify primary as the type.

The pvlan mapping command identifies the other PVLANs for which this VLAN is the primary. The command also specifies the primary VLAN ports to which you are mapping the other secondary VLANs. The mapping command is not allowed on the secondary VLANs. The parameters of the pvlan mapping command are as follows:

• The vlan-id parameter specifies another PVLAN. The other PVLAN you want to specify must already be configured.
• The ethernet portnum parameter specifies the primary VLAN port to which you are mapping all the ports in the other PVLAN (the one specified by vlan-id ).

The pvlan pvlan-trunk command identifies the switch-switch link for the PVLAN. There can be more than one switch-switch link for a single community VLAN.