cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
156
Views
2
Helpful
5
Replies

Private Vlan Trunk including community vlans

Tobias Heisele
Level 1
Level 1

Hi,

I'm a bit confused with the private vlan commands. Maybe you can help me. I need to connect to add a server via trunk, that should contain "normal" vlans and a community vlan. This is my config:

interface Gi1/0/1
switchport mode private-vlan trunk (secondary?)
switchport private-vlan trunk allow vlan <list of primary vlans>
switchport private-vlan association trunk <primary-vlan> <community-vlan>

Doing this, I get the following error: "Community or Two-way community VLANS is not supported on private-vlan trunk ports."

What am I doing wrong? I am confused regarding the "association" and "mapping" commands. When do I need what? Maybe someone can help me out.

5 Replies 5

Hello @Tobias Heisele 

In your case, PVLAN trunks do not support community VLANs. Use a normal trunk if you need to carry both regular VLANs and community VLANs.

PVLAN trunks are designed to carry only primary and isolated VLANs, not community VLANs.

Thanks !

vishalbhandari
Spotlight
Spotlight

@Tobias Heisele You're running into this error because community VLANs can't be configured directly on private VLAN trunk ports. Private VLAN trunks are designed to carry primary and isolated VLANs, but community VLANs are only supported on access ports. To connect a server that needs both normal VLANs and a community VLAN, consider using a regular trunk port instead of a private VLAN trunk. On that trunk, allow both the standard VLANs and the community VLAN. The private VLAN association command is used on primary VLANs to map isolated or community VLANs, but this mapping typically applies to access ports, not trunk ports.

Which vlan tag is required on the server side? Primary or community vlan id?

Hello
Just make the server connection a trunk, if it needs to carry "all"vlans  - the same is true when you have two switches running Pvlans and they are interconnected , that interconnection  is a basic trunk


Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul

Tobias Heisele
Level 1
Level 1

But with which vlan id does the traffic for the community vlan be tagged? I suppose it need to be tagged with the secondary vlan-id. Correct?

Review Cisco Networking for a $25 gift card