02-04-2025 07:01 AM
Hi,
I'm a bit confused with the private vlan commands. Maybe you can help me. I need to connect to add a server via trunk, that should contain "normal" vlans and a community vlan. This is my config:
interface Gi1/0/1
switchport mode private-vlan trunk (secondary?)
switchport private-vlan trunk allow vlan <list of primary vlans>
switchport private-vlan association trunk <primary-vlan> <community-vlan>
Doing this, I get the following error: "Community or Two-way community VLANS is not supported on private-vlan trunk ports."
What am I doing wrong? I am confused regarding the "association" and "mapping" commands. When do I need what? Maybe someone can help me out.
02-04-2025 10:02 AM - edited 02-04-2025 10:03 AM
Hello @Tobias Heisele
In your case, PVLAN trunks do not support community VLANs. Use a normal trunk if you need to carry both regular VLANs and community VLANs.
PVLAN trunks are designed to carry only primary and isolated VLANs, not community VLANs.
Thanks !
02-04-2025 10:17 AM
@Tobias Heisele You're running into this error because community VLANs can't be configured directly on private VLAN trunk ports. Private VLAN trunks are designed to carry primary and isolated VLANs, but community VLANs are only supported on access ports. To connect a server that needs both normal VLANs and a community VLAN, consider using a regular trunk port instead of a private VLAN trunk. On that trunk, allow both the standard VLANs and the community VLAN. The private VLAN association command is used on primary VLANs to map isolated or community VLANs, but this mapping typically applies to access ports, not trunk ports.
02-04-2025 12:10 PM
Which vlan tag is required on the server side? Primary or community vlan id?
02-05-2025 12:18 AM
Hello
Just make the server connection a trunk, if it needs to carry "all"vlans - the same is true when you have two switches running Pvlans and they are interconnected , that interconnection is a basic trunk
02-05-2025 12:21 AM
But with which vlan id does the traffic for the community vlan be tagged? I suppose it need to be tagged with the secondary vlan-id. Correct?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide