Re: PVLAN on 3750

Yes used normal trunks across the switches...

Promiscuous port was on an SVI on 3750.

Sorry for the confusion, I should of read the whole thread.

On 2011-06-22, at 9:00, Joe Astorino <joeastorino1982_at_gmail.com> wrote:

> Carl,
>
> Did you simply trunk the private VLANs across multiple switches or did you
configure a private VLAN promiscuous / isolated port as a trunk itself? They
are different things.
>
> Trunking private vlans for interswitch private vlan communication is normal
and supported. Making a promiscuous port or isolated port itself into a trunk
I only see evidence of on the larger platforms like the 4500 and 6500
>
> On Wed, Jun 22, 2011 at 8:56 AM, Carl Gosselin <carl.gosselin_at_altizone.com>
wrote:
> Joe,
> I used PVLAN on a mixed 3750 & 3560 environment before so 3750 is definetly
available.
>
> Issues I've seen with PVLAN is that you can't use it in conjunction with
DHCP snooping and ARP inspection.
>
> -Carl
>
> On 2011-06-22, at 8:46, Joe Astorino <joeastorino1982_at_gmail.com> wrote:
>
> > I believe that feature is available on the 4500 and 6500 platforms but
not
> > on the 3750 platform.
> >
> > On Wed, Jun 22, 2011 at 8:45 AM, Sadiq Yakasai <sadiqtanko_at_gmail.com>
wrote:
> >
> >> I think you are right there! I have not seen anywhere, an indication of
a
> >> promiscuous port also capable of being a trunk port.
> >>
> >>
> >>
> >> On Wed, Jun 22, 2011 at 1:19 PM, Persio Pucci <persio_at_gmail.com> wrote:
> >>
> >>> Sadiq,
> >>>
> >>> I have tried that while troubleshooting what was wrong during the
> >>> maintenance window, but that did not help.
> >>>
> >>> I suspect this have something to do with the trunk port acting as
> >>> promiscuous and not working fine as trunk, but can't find anything on
it.
> >>>
> >>>
> >>> On Wed, Jun 22, 2011 at 8:57 AM, Sadiq Yakasai <sadiqtanko_at_gmail.com
> >>> wrote:
> >>>
> >>>> Hmmm, sounds very strange, as the configuration is pretty straight
> >> forward
> >>>> as you have mentioned.
> >>>>
> >>>> One quick test to verify this: how about if you created an SVI for the
> >>>> primary VLAN and added the mapping on there. Does the problem persist?
> >>>>
> >>>> I understand this might conflict with your network design but this is
> >>>> strictly for troubleshooting sake.
> >>>>
> >>>> HTH,
> >>>> Sadiq
> >>>>
> >>>> On Wed, Jun 22, 2011 at 12:06 PM, Persio Pucci <persio_at_gmail.com>
> >> wrote:
> >>>>
> >>>>> Hi fellows,
> >>>>>
> >>>>> I just tried to implement a fairly standard PVLAN configration on a
> >> 3750,
> >>>>> however it did not work as intended. Configs as follows:
> >>>>>
> >>>>> vlan 501
> >>>>>> private-vlan isolated
> >>>>>> !
> >>>>>> vlan 500
> >>>>>> private-vlan primary
> >>>>>> private-vlan association add 501
> >>>>>> !
> >>>>>> int g1/0/3
> >>>>>> switchport mode private-vlan host
> >>>>>> switchport private-vlan host-association 500 501
> >>>>>> !
> >>>>>> int g2/0/5
> >>>>>> switchport mode private-vlan promiscuous
> >>>>>> switchport private-vlan mapping 500 add 501
> >>>>>
> >>>>>
> >>>>> Configuration is pretty straight-forward but could not identify what
> >> went
> >>>>> wrong. Command "*show interface g1/0/3 private-vlan mapping*" would
> >>>>> produce
> >>>>> a "*Private vlan mapping information is not available*" response,
> >>>>> although "
> >>>>> *show vlan private-vlan*" would show them correctly configured.
> >>>>>
> >>>>> As a result, I was unable to reach IP addresses on the 500/501 subnet
> >>>>> that
> >>>>> were located on the isolated vlan/ports
> >>>>>
> >>>>> Another question I have (and I could not find much information on the
> >>>>> documentation) is regarding making promiscuous a trunk port (as port
> >>>>> g2/0/5
> >>>>> in the above example). How does it work for VLANs out of the PVLAN
> >> config
> >>>>> that are supposed to be received on this trunk? They also did not
seem
> >> to
> >>>>> be
> >>>>> working at the time.
> >>>>>
> >>>>> Any help is appreciated.
> >>>>>
> >>>>> Persio
> >>>>>
> >>>>>
> >>>>> Blogs and organic groups at http://www.ccie.net
> >>>>>
> >>>>>
Received on Wed Jun 22 2011 - 09:08:58 ART