- New and Changed Information
- Contents
- Preface
- Overview
- Creating Port Profiles
- Configuring Port Profile Inheritance
- Configuring System Port Profiles
- Configuring Port Channels in Port Profiles
- Configuring a Private VLAN in a Port Profile
- Verifying the Port Profile Configuration
- Port Profile Configuration Limits
- Index
Configuring a Private VLAN in a Port Profile
This chapter describes how to create a port profile for a private VLAN (PVLAN).
This chapter includes the following sections:
•Information About Private VLANs
•Configuring a Port Profile as a Private VLAN
•Feature History for Private VLAN Port Profiles
Information About Private VLANs
Private VLANs (PVLANs) are used to segregate Layer 2 ISP traffic and convey it to a single router interface. PVLANs achieve device isolation by applying Layer 2 forwarding constraints that allow end devices to share the same IP subnet while being Layer 2 isolated. In turn, the use of larger subnets reduces address management overhead.
For more information about PVLAN, see the Cisco Nexus 1000V Layer 2 Switching Configuration Guide, Release 4.2(1)SV1(4)
Configuring a Port Profile as a Private VLAN
You can use this procedure to configure a port profile to be used as a private VLAN (PVLAN).
BEFORE YOU BEGIN
Before beginning this procedure, you must know or do the following:
•You are logged in to the CLI in EXEC mode.
•You know the VLAN IDs for both the primary and secondary VLAN in the private VLAN pair.
•You know whether this private VLAN inherits its configuration.
SUMMARY STEPS
1. config t
2. port-profile [type {ethernet | vethernet}] name
3. switchport mode private-vlan {host | promiscuous}
4. switchport private-vlan host-association primary-vlan secondary-vlans
5. switchport private-vlan mapping primary_vlan [add | remove] secondary_vlans
6. show port-profile [brief | expand-interface | usage] [name profile-name]
7. copy running-config startup-config
DETAILED STEPS
PVLAN Example Configuration
This section includes the following examples:
•PVLAN Example When Upstream Switch Supports PVLAN
•PVLAN Example When Upstream Switch Does Not Support PVLAN
PVLAN Example When Upstream Switch Supports PVLAN
Use the following example if the switch upstream from the Cisco Nexus 1000V, such as a Cisco Catalyst 6500, supports private VLAN. This example shows how to configure the Cisco Nexus 1000V uplink as a regular trunk port, and then how to configure the required promiscuous SVI interface on the upstream switch.
vlan 153
private-vlan primary
private-vlan association 154-155
vlan 154
private-vlan community
vlan 155
private-vlan isolated
port-profile type vethernet pv154
vmware port-group
switchport mode private-vlan host
switchport private-vlan host-association 153 154
no shutdown
state enabled
port-profile type vethernet pv155
vmware port-group
switchport mode private-vlan host
switchport private-vlan host-association 153 155
no shutdown
state enabled
port-profile type ethernet datatrunk
vmware port-group
switchport mode trunk
switchport trunk allowed vlan 1,153-155
no shutdown
state enabled
Configuration on the upstream switch:
vlan 153
private-vlan primary
private-vlan association 154-155
!
vlan 154
private-vlan community
!
vlan 155
private-vlan isolated
!
interface Vlan153
ip address 7.153.153.1 255.255.255.0
private-vlan mapping 154-155
PVLAN Example When Upstream Switch Does Not Support PVLAN
Use the following example if the switch upstream from the Cisco Nexus 1000V does not support private VLAN. This example shows how to configure the Cisco Nexus 1000V uplink as a private VLAN promiscuous trunk port. No private VLAN configuration is needed on the upstream switch.
vlan 153
private-vlan primary
private-vlan association 154-155
vlan 154
private-vlan community
vlan 155
private-vlan isolated
port-profile type vethernet pv154
vmware port-group
switchport mode private-vlan host
switchport private-vlan host-association 153 154
no shutdown
state enabled
port-profile type vethernet pv155
vmware port-group
switchport mode private-vlan host
switchport private-vlan host-association 153 155
no shutdown
state enabled
port-profile type ethernet pcpvtrunk
vmware port-group
switchport mode private-vlan trunk promiscuous
switchport private-vlan mapping trunk 153 154-155
switchport private-vlan trunk allowed vlan 153-155
channel-group auto mode on
no shutdown
state enabled
Feature History for Private VLAN Port Profiles
This section provides the feature history for system port profiles.
|
|
|
---|---|---|
Private VLAN Port Profiles |
4.0(4)SV1(1) |
This feature was introduced. |