Users Guide

AG4(conf-if-po-128)# switchport trunk allowed vlan 11-13,21-22,100,200
AG4(conf-if-po-128)# exit
Spine Switch
1. Create the primary VLANs extended from AG1 and AG2.
SPINE(config)# interface vlan 100
SPINE(conf-if-vl-100)# ip address 172.1.1.1/16
SPINE(conf-if-vl-100)# exit
SPINE(config)# interface vlan 200
SPINE(conf-if-vl-200)# ip address 172.2.1.1/16
SPINE(conf-if-vl-200)# exit
2. Associate the VLT port channels to the primary VLANs extended from AG1 and AG2.
SPINE(config)# interface ethernet1/1/10
SPINE(conf-if-eth1/1/10)# no shutdown
SPINE(conf-if-eth1/1/10)# no switchport
SPINE(conf-if-eth1/1/10)# channel-group 101 mode active
SPINE(conf-if-eth1/1/10)# exit
SPINE(config)# interface ethernet1/1/11
SPINE(conf-if-eth1/1/11)# no shutdown
SPINE(conf-if-eth1/1/11)# no switchport
SPINE(conf-if-eth1/1/11)# channel-group 101 mode active
SPINE(conf-if-eth1/1/11)# exit
3. (Optional) To enable connectivity between end devices that belong to different secondary VLANs (community or isolated or
both) of a PVLAN domain, enable ip local-proxy arp on the VLAN in the spine switch.
SPINE(config)# interface vlan100
SPINE(conf-if-vl-100)# ip address 172.1.1.1/16
SPINE(conf-if-vl-100)# ip local-proxy-arp
SPINE(config)# interface vlan200
SPINE(conf-if-vl-200)# ip address 172.2.1.1/16
SPINE(conf-if-vl-200)# ip local-proxy-arp
Verify the configuration
To verify the configuration, use the show vlan private-vlan command on the leaf nodes:
PVLAN 100
AG1# show vlan private-vlan 100
Primary Secondary Type Active Ports
------- --------- --------- ------ --------------
100 Primary Yes Po101,128,1000
11 Community Yes Eth1/1/1
Po128,1000
12 Community Yes Po1,128,1000
13 Isolated Yes Eth1/1/2
Po2,128,1000
PVLAN 200
AG1# show vlan private-vlan 200
Primary Secondary Type Active Ports
------- --------- --------- ------ --------------
200 Primary Yes Po101,128,1000
21 Community Yes Po3,128,1000
22 Isolated Yes Po4,128,1000
Layer 2
691