Private vlan

[jofraile8]

Hi

I`m a new in this forum. if it is posible i will like to help me in one problem that i have.

the problem is this.

i have one sw 4506. there i have a lot of vlans, A few of all of this vlans are private vlans.

I want to conect  this machine with a R2811. And I don´t know how to configure the port

I found one solution in Internet, but i can´t confirms the solution before go to the client, so if you can please help me

the solution I found is this.

vlan 350

  private-vlan primary

  private-vlan association 351

!

vlan 351

  private-vlan isolated

!

vlan 367

  private-vlan primary

  private-vlan association 368

!

vlan 368

  private-vlan isolated

interface GigabitEthernet3/9

switchport private-vlan trunk allowed vlan 1(normal vlan),10(normal vlan),350,367,

switchport private-vlan mapping trunk 350 351(i have to do one line for every islolated vlan???)

switchport private-vlan mapping trunk 367 368

switchport mode private-vlan trunk promiscuous

Thank you

Joseba

[Amit Singh]

Joseba,

If I get your questions correctly, you want to connect a machine/pc which is a part of the private vlan to a 2811 router which is connected to the switch. If this is the scenario, you have to configure the switchport connected to router as "promiscous port".

switchport mode private-vlan promiscuous

switchport private-vlan mapping 20 add 501-503 

Use the config guide below for the same set up.

http://www.cisco.com/en/US/docs/switches/lan/catalyst3750/software/release/12.2_25_see/configuration/guide/swpvlan.html#wp1055972

Although its for 3750, the concept and command will be identical.

Also check this : http://packetlife.net/blog/2010/aug/30/basic-private-vlan-configuration/

Cheers,
-amit singh

[Gurpreet Kochar]

switchport mode private-vlan trunk promiscuous

this command is not supported on every platform

As far as i remember, this command is supported only on 4500 platform

However there is a very unsual workaround to overcome this limitation on other platforms

[jofraile8]

Hi Amit and Gurpreet

thanks for answer my question, but maybe I explain incorrectly

What I want is to connect cisco 4500 against a router in way trunk,
I want that there happen all the vlanes, which are privated and the normal vlan.

For it in Internet I have found this solution that i want to know if it could be correct or not.

If you can help me please.

Thank you!

[Gurpreet Kochar]

Yup, that solution works for you since you have a 4500.

The configuration of the router shall remain just like any other router doing router on a stick.

Hope you find the information relevant and useful

Do not forget to rate the helpful posts

Thanks

Regards

GK

CSE - Lan Switching