Error: Community vlan cannot be mapped on a secondary trunk port

[maen.zakkar@rbc.com]

Hi There

I'm trying to configure PVLAN on this switch: Nexus9000 C9348GC-FXP,

-isolated ports are configured properly

-When I try to configure community port using the following configuration I get an error:

!
feature private-vlan
!
vlan 1,205-206,215-216
!
vlan 205
name primary_VLAN_205
private-vlan primary
private-vlan association 215
vlan 206
name primary_VLAN_206
private-vlan primary
private-vlan association 216
vlan 215
name secondary_VLAN_215_community
private-vlan community

vlan 216
name secondary_VLAN_216_community
private-vlan community
!

interface Ethernet1/1
switchport
switchport mode private-vlan trunk secondary
switchport private-vlan trunk native vlan 2
switchport private-vlan trunk allowed vlan 1-3967
switchport private-vlan association trunk 205 215
switchport private-vlan association trunk 206 216
logging event port link-status
logging event port trunk-status
no shutdown

When I enter:

A1(config-if)#   switchport private-vlan association trunk 206 216

ERROR: Eth1/1 : Community vlan cannot be mapped on a secondary trunk port

Please advise!

Thanx in advance

[f00z · Accepted solution]

AFAK, community vlans are not allowed on a private vlan isolated trunk port (private-vlan trunk secondary). I haven't used use PVLAN on nexus but that's how it was on the catalyst stuff and I assume it still applies.