Tagged vlan inside isolated pvlan

sfouant at shortestpathfirst.net sfouant at shortestpathfirst.net
Mon Aug 23 17:50:00 UTC 2010

>   Hello,
> I have a catalyst 6503 with sup32 and was trying to set a tagged vlan
> inside a pvlan. Basically I wanna have the behavior of:
> switchport mode access
> switchport access vlan 101
> switchport protected.
> So that other machines connected to the 6503 won't be able to
> communicate with this port (apart from the uplink) and in the same time
> I want to have vlan 101 tagged in the isolated port.

Check out
for more information on configuring PVLANs for trunking.  You're going to
want to configure VLAN 101 as your Isolated VLAN inside the Native
(Primary) VLAN, and you'll enable the trunking on the secondary VLAN. 
Something along the following will give you the expected behavior:

switchport mode private-vlan trunk secondary


Stefan Fouant

More information about the NANOG mailing list