cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
413
Views
0
Helpful
1
Replies

private-vlan behavior

Hi Experts,

I have a basic question in private vlan.

I have two switches SW1 and SW2 connected back to back via a port channel.

on SW1, i have configured the following.

vlan 990
  private-vlan primary
  private-vlan association 991-994
vlan 991-993
  private-vlan community
vlan 994
  private-vlan isolated

when i send a simple L2 traffic with destination mac as SW2's mac and source mac as AAAA.AAAA.AAAA thro AAAD which belongs to Vlan's 991-994,
i see that in CAM Table all these source mac's are associated with vlan 990.

Just curious to know how internally it works and how is the mac address table populated that way.

Any help is highly appreciated.

Thanks,
-Vijay.
1 Reply 1

Julio Carvajal
VIP Alumni
VIP Alumni

Hello Vijay,

That is exactly how the Private Vlan works..

The mac address table will populate entries for the primary vlan (remember that what we are doing here is spliting a vlan into sub-vlans.

Regards,

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC
Review Cisco Networking products for a $25 gift card