Configuration Guide User guide

814 FastIron Configuration Guide
53-1002494-02
Private VLAN configuration
Configuring the primary VLAN
To configure a primary VLAN, enter commands such as the following.
Brocade(config)# vlan 7
Brocade(config-vlan-7)# untagged ethernet 3/2
Brocade(config-vlan-7)# pvlan type primary
Brocade(config-vlan-7)# pvlan mapping 901 ethernet 3/2
These commands create port-based VLAN 7, add port 3/2 as an untagged port, identify the VLAN
as the primary VLAN in a PVLAN, and map the other secondary VLANs to the ports in this VLAN.
To map the secondary VLANs to the primary VLAN and to configure the tagged switch link port,
enter commands such as the following.
Brocade(config)# vlan 100
Brocade(config-vlan-100)# tagged ethernet 1/1/10 to 1/1/11
Brocade(config-vlan-100)# untagged ethernet 1/1/4
Brocade(config-vlan-100)# pvlan type primary
Brocade(config-vlan-100)# pvlan mapping 101 ethernet 1/1/4
Brocade(config-vlan-100)# pvlan mapping 102 ethernet 1/1/4
Brocade(config-vlan-100)# pvlan pvlan-trunk 101 ethernet 1/1/10 to 1/1/11
These commands create port-based VLAN 100, add port 1/1/10 to 1/1/11 as a tagged port,
identify the VLAN as the primary VLAN in a PVLAN, map the other secondary VLANs to the ports in
this VLAN, and configure the tagged switch link port.
Syntax: untagged ethernet [<stack-unit>/<slotnum>/]<portnum> [to
[<stack-unit>/<slotnum>/]<portnum> | ethernet [<stack-unit>/<slotnum>/]<portnum>]
or
Syntax: tagged ethernet [<stack-unit>/<slotnum>/]<portnum> [to
[<stack-unit>/<slotnum>/]<portnum> | ethernet [<stack-unit>/<slotnum>/]<portnum>]
Syntax: [no] pvlan type community | isolated | primary
Syntax: [no] pvlan mapping <vlan-id> ethernet [<stack-unit>/<slotnum>/]<portnum>
Syntax: [no] pvlan pvlan-trunk <vlan-id> ethernet [<stack-unit
>/<slotnum>/]<portnum> [to
[<stack-unit>/<slotnum>/]<portnum>]
The untagged or tagged command adds the ports to the VLAN.
The pvlan type command specifies that this port-based VLAN is a PVLAN. Specify primary as the
type.
The pvlan mapping command identifies the other PVLANs for which this VLAN is the primary. The
command also specifies the primary VLAN ports to which you are mapping the other secondary
VLANs. The mapping command is not allowed on the secondary VLANs. The parameters of the
pvlan mapping command are as follows:
• The <vlan-id> parameter specifies another PVLAN. The other PVLAN you want to specify must
already be configured.
• The ethernet <portnum> parameter specifies the primary VLAN port to which you are mapping
all the ports in the other PVLAN (the one specified by <vlan-id>).
The pvlan pvlan-trunk command identifies the switch-switch link for the PVLAN. There can be more
than one switch-switch link for a single community VLAN.