promiscous port

[message4mayank]

Hi

Whether below config on catalyst 4500 switch is ok ? port type is access.

Do I need to remove switchport nonegotiate command or its ok ?

interface <<interface>>
 description <connected to firewall>
 switchport private-vlan mapping <<primary_vlan>> <<secondary_vlan>>
 switchport mode private-vlan promiscuous
 switchport nonegotiate
 storm-control broadcast level 60.00
 spanning-tree portfast
 no shutdown

Thanks

[sachintambat]

Hi,

Config is ok.

Its ok If you keep switchport nonegotiate, it as its stops DTP negotiation.

-Sachin

[message4mayank]

whether promiscuous port automatically stops trunking  and thatst why removing "switchport nonegotiate" will make no difference ?

[sachintambat]

You can remove it if you want DTP negotiation to be required, if you have trusted device at other end then remove it.

[message4mayank]

we have firewall at other end..

[sachintambat]

Remove switch port nonegotiation then