Cisco Nexus 5000 Series Command Reference Release 4.0(1a)N2(1) (OL-16599-01, March 2009)

Send comments to [e-mail]
2-41
Cisco Nexus 5000 Series Command Reference
OL-16599-01
Chapter 2 Ethernet Commands
private-vlan association
private-vlan association
To configure the association between a primary VLAN and a secondary VLAN on a private VLAN, use
the private-vlan association command. To remove the association, use the no form of this command.
private-vlan association {[add] secondary-vlan-list | remove secondary-vlan-list}
no private-vlan association
Syntax Description
Command Default None
Command Modes VLAN configuration mode
Command History
Usage Guidelines You must enable private VLANs by using the feature private-vlan command before you can configure
private VLANs. The commands for configuring private VLANs are not visible until you enable private
VLANs.
If you delete either the primary or secondary VLAN, the ports that are associated with the VLAN become
inactive. When you enter the no private-vlan command, the VLAN returns to the normal VLAN mode.
All primary and secondary associations on that VLAN are suspended, but the interfaces remain in private
VLAN mode. However, when you reconvert the specified VLAN to private VLAN mode, the original
associations are reinstated.
If you enter the no vlan command for the primary VLAN, all private VLAN associations with that
VLAN are lost. However, if you enter the no vlan command for a secondary VLAN, the private VLAN
associations with that VLAN are suspended and return when you recreate the specified VLAN and
configure it as the previous secondary VLAN.
The secondary-vlan-list argument cannot contain spaces. It can contain multiple comma-separated
items. Each item can be a single secondary VLAN ID or a hyphenated range of secondary VLAN IDs.
The secondary-vlan-list parameter can contain multiple secondary VLAN IDs.
A private VLAN is a set of private ports that are characterized by using a common set of VLAN number
pairs. Each pair is made up of at least two special unidirectional VLANs and is used by isolated ports
and/or by a community of ports to communicate with routers.
Multiple community and isolated VLANs are allowed. If you enter a range of primary VLANs, the
system uses the first number in the range for the association.
add (Optional) Associates a secondary VLAN to a primary VLAN.
secondary-vlan-list Number of the secondary VLAN.
remove Clears the association between a secondary VLAN and a primary VLAN.
Release Modification
4.0(0)N1(1a) This command was introduced.