02-25-2018 11:10 AM - edited 03-01-2019 01:42 PM
Hi!
The https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus3000/sw/layer2/7x/b_Cisco_Nexus_3000_Layer_2_Switching_Config_7x/b_Cisco_Nexus_3000_Layer_2_Switching_Config_7x_chapter_011.html#con_1116740 mentions that "private VLANs do not provide port mode support for port channels... or vPCs". I wonder what "port mode" is being talked about in this case. Is this the PVLAN "port type" (promiscuous/isolated/community), which effectively means that PVLANs don't work with PC/vPC on N3K, or does this mean something other than that?
Solved! Go to Solution.
02-26-2018 09:05 AM
Hi,
Great question! What the two limitations state is that any port with "switchport mode private-vlan..." cannot be bundled into a port-channel thus cannot be in a vPC either.
Example in my N3100-V (this will apply for all N9Ks as well):
N3K(config-if)# feature private-vlan
N3K(config)# int e1/10
N3K(config-if)# switchport mode private-vlan promiscuous
N3K(config-if)# channel-group 3 mode active
command failed: port not compatible:[Port is PVLAN host]
** You can use force option to override the port's parameters
** (e.g. "channel-group X force")
** Use "show port-channel compatibility-parameters" to get more information on failure
N3K# sh run int e1/10
!Command: show running-config interface Ethernet1/10
!Time: Mon Feb 26 17:03:11 2018
version 7.0(3)I4(7)
interface Ethernet1/10
switchport mode private-vlan promiscuous
I'll see if we can get the documentation to be a bit more explicit on this one. Appreciate you bringing it up!
Hope this helps.
- Andrea
02-26-2018 09:05 AM
Hi,
Great question! What the two limitations state is that any port with "switchport mode private-vlan..." cannot be bundled into a port-channel thus cannot be in a vPC either.
Example in my N3100-V (this will apply for all N9Ks as well):
N3K(config-if)# feature private-vlan
N3K(config)# int e1/10
N3K(config-if)# switchport mode private-vlan promiscuous
N3K(config-if)# channel-group 3 mode active
command failed: port not compatible:[Port is PVLAN host]
** You can use force option to override the port's parameters
** (e.g. "channel-group X force")
** Use "show port-channel compatibility-parameters" to get more information on failure
N3K# sh run int e1/10
!Command: show running-config interface Ethernet1/10
!Time: Mon Feb 26 17:03:11 2018
version 7.0(3)I4(7)
interface Ethernet1/10
switchport mode private-vlan promiscuous
I'll see if we can get the documentation to be a bit more explicit on this one. Appreciate you bringing it up!
Hope this helps.
- Andrea
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: