Users Guide

Layer 2 Switching Commands 880
appear in the frame. Due to the internal processing of QinQ tagging, the
TPID of ingress frames mirrored from the SP port will always be 0x8100. In
addition, packets forwarded internally across a stacking link may have
different tags applied than packets forwarded on a local egress port. This is
due to the processing required for forwarding across a stack.
Example
This example configures ports Gi1/0/10 through Gi1/0/24 as CE ports using
VLAN 10 as the service provider VLAN ID. See the example for the
switchport dot1q ethertype command to configure an associated SP port.
console(config)#vlan 10
console(config-vlan10)#exit
console(config)#interface range gi1/0/10-24
console(config-if)#switchport access vlan 10
console(config-if)#switchport mode dot1q-tunnel
console(config-if)#exit
switchport mode private-vlan
Use the switchport mode private-vlan command in Interface Configuration
mode to define a private VLAN association for an isolated or community
interface or a mapping for a promiscuous interface.
Use the no form of the command to remove the private VLAN association or
mapping from the interface.
Syntax
switchport mode private-vlan {host|promiscuous | trunk promiscuous |
trunk secondary}
no switchport mode private-vlan
• host—Configure the interface as a private VLAN host port. Host ports are
community or isolated ports, depending on the VLAN to which they
belong.
• promiscuous—Configure the interface as a private VLAN promiscuous
port. Promiscuous ports are members of the primary VLAN.
• trunk promiscuous—Configures an interface as a private VLAN
promiscuous trunk port. These ports can carry traffic of several primary
VLANs and normal VLANs.