Showing results for 
Search instead for 
Did you mean: 

ESX/dvSwitch with PVLAN connected to a N2K Host interface


Hi Community,

Basically our pvlan implementation is working well in our DC => FEX interfaces configured in mode pvlan host and a promiscuous defined at our core switch allow a secured communication. 

Now we are trying to implement dvSwitch with the pvlan feature in order to prevent the VMs communication within the same ESX.

I understand that we just need to extend the pvlan across 802.1q trunk (just like normal vlans) then the dvSwitch will enforce the pvlans communication.

The problem is when adding in Hif the pvlans on the trunk as regular vlans it won’t allowed them

Let’s say we have vlan 10 is primary – vlan 11 isolated – vlan 12 community. When trying to configure a Hif as regular trunk on both N5k =>

interface Ethernet121/1/11

switchport mode trunk

switchport trunk allowed vlan 10,11

The vlan are not allowed on the trunk (even if the allowed range is 10-12).

sh interface Eth121/1/11 trunk

Port                    Vlans Allowed on Trunk

Eth121/1/11          -


As soon as we unconfigure the pvlan primary/secondary feature from the vlans ( no private-vlan) – vlan 10-11 or 12 are allowed on the trunk again.

To sum-up does someone has already pvlan configured on N5K/N2k and try to forward them as regular vlan through a trunk on a N2K HOST interface ?

Is it possible to connect a ESX with dvSwitch & PVLANs configured through a N2k interface ?

Or am I missing something ?

I suppose it will work by connecting the ESX directly to the N5k.

N5K-C5548P - 5.0(3)N1(1c)  / N2K-C2248TP-1GE

Thanks for any suggestions !


1 Accepted Solution
2 Replies 2
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: