3560 private vlan: can one physical port be member of multiple communities

george · ‎04-09-2009

with private vlan is it possible to have one physical port be a member of multiple communities? here is and example:

vlan 100

private-vlan primary

private-vlan association 120,130

!

vlan 120

private-vlan community

!

vlan 130

private-vlan community

!

how do i get fa 0/1 to be member of both 120 and 130 vlans? i would like this to happen:

switchport private-vlan host-association 100 120,130

is this possible?

thanks.

wong34539 · ‎04-15-2009

As an isolated VLAN-Carries traffic from isolated ports to a promiscuous port. As a community VLAN-Carries traffic between community ports and to promiscuous ports. You can configure multiple community VLANs in a PVLAN. Community VLANs-Ports within a community VLAN can communicate with each other but cannot communicate with ports in other communities at the Layer 2 level. I think you can't configure multiple communities on single VLAN.

http://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/release/12.2_20_se/configuration/guide/swpvlan.html

Thotsaphon Lueangwattanaphong · ‎04-15-2009

George,

It's impossible. You can associate one port per a community.

HTH,

Toshi