port private-vlan trunk secondary
Use port private-vlan trunk secondary to configure a port as a trunk secondary port of the specified VLANs and assign the port to these VLANs.
Use undo port private-vlan trunk secondary to cancel the trunk secondary attribute of a port in the specified VLANs.
Syntax
port private-vlan vlan-id-list trunk secondary
undo port private-vlan vlan-id-list trunk secondary
Default
A port is not a trunk secondary port of any VLANs.
Views
Layer 2 Ethernet interface view
Layer 2 aggregate interface view
Predefined user roles
network-admin
Parameters
vlan-id-list: Specifies a space-separated list of up to 10 secondary VLAN items. Each item specifies a secondary VLAN ID or a range of secondary VLAN IDs in the form of vlan-id1 to vlan-id2. The value range for secondary VLAN IDs is 1 to 4094. The value for the vlan-id2 argument must be equal to or greater than the value for the vlan-id1 argument. Though the system default VLAN (VLAN 1) is in the valid value range, it cannot be configured in the command.
Usage guidelines
If the specified VLANs are secondary VLANs that have been associated with primary VLANs, the command also assigns the port to the associated primary VLANs. Also, the following events occur:
For an access port, the device performs the following operations:
Changes the port link type to hybrid. The PVID of the port does not change.
Assigns the port to the secondary VLANs and the associated primary VLANs as a tagged member.
For a trunk port, the device does not change the port link type or PVID.
For a hybrid port, the device does not change the port link type or PVID.
If the port has been an untagged or tagged member of part of the secondary VLANs and their associated primary VLANs, this member attribute remains in these VLANs. The device assigns the port to the rest of the secondary VLANs and their associated primary VLANs as a tagged member.
If the hybrid port does not allow any of the secondary VLANs and their associated primary VLANs, the device assigns the port to these VLANs as a tagged member.
A trunk secondary port can join only one secondary VLAN among all secondary VLANs associated with a primary VLAN. However, it can join multiple secondary VLANs that are associated with different primary VLANs.
The undo form of this command does not change the VLAN attributes (allowed primary VLANs, port link type, and PVID) of the port.
When you execute the undo form of this command on a trunk secondary port of the VLANs specified by the vlan-id-list argument, one of the following events occurs:
If the port is an access port, the device does not change the VLAN configuration of the port.
If the port is a trunk or hybrid port, the device removes the port from the specified VLANs.
You can associate the specified VLANs with their respective primary VLANs before or after you execute this command.
This command does not take effect on the specified VLAN if any of the following conditions applies:
The specified VLAN does not exist.
The specified VLAN is not a secondary VLAN and is used for other purposes.
The specified VLAN shares the same primary VLAN with other secondary VLANs, and the current port has been configured as a trunk secondary port in one of the other secondary VLANs.
This command is mutually exclusive with the port private-vlan host, port private-vlan promiscuous and port private-vlan trunk promiscuous commands.
For a downlink port to permit multiple secondary VLANs associated with different primary VLANs, use the port private-vlan trunk secondary command to assign the port to these secondary VLANs. The port can then transmit packets from these secondary VLANs with VLAN tags. For a downlink port to permit only one secondary VLAN, use the port private-vlan host command to assign the port to the secondary VLAN. The port can then transmit packets from the secondary VLAN without VLAN tags.
Examples
In this example, VLANs 2 and 3 are primary VLANs. VLAN 2 is associated with secondary VLAN 20. VLAN 3 is associated with secondary VLAN 30.
# Display information about .
<Sysname> system-view [Sysname] interface [Sysname-] display this # interface # return
# Configure as a trunk secondary port of VLANs 20 and 30, and then verify the configuration.
[Sysname-] port private-vlan 20 30 trunk secondary [Sysname-] display this # interface port link-type hybrid port hybrid vlan 2 3 20 30 tagged port hybrid vlan 1 untagged port private-vlan 20 30 trunk secondary # return
The output shows that:
is a trunk secondary port of VLANs 20 and 30.
is a tagged member of VLANs 2, 3, 20, and 30.
The port link type of is hybrid.
# Execute the undo port private-vlan trunk secondary command on , and then verify the configuration.
[Sysname-] undo port private-vlan 20 30 trunk secondary [Sysname-] display this # interface port link-type hybrid port hybrid vlan 2 3 tagged port hybrid vlan 1 untagged # return
The output shows that:
is removed from VLANs 20 and 30.
is a tagged member of VLANs 2 and 3.
The port link type and PVID of do not change.
In this example, VLAN 10 is not a secondary VLAN.
# Display information about .
<Sysname> system-view [Sysname] interface [Sysname-] display this # interface # return
# Configure as a trunk secondary port of VLAN 10, and then verify the configuration.
[Sysname-] port private-vlan 10 trunk secondary [Sysname-] display this # interface port link-type hybrid port hybrid vlan 10 tagged port hybrid vlan 1 untagged port private-vlan 10 trunk secondary # return
The output shows that:
is a trunk secondary port of VLAN 10.
is a tagged member of VLAN 10.
The port link type of is hybrid.
# Execute the undo port private-vlan trunk secondary command on , and then verify the configuration.
[Sysname-] undo port private-vlan 10 trunk secondary [Sysname-] display this # interface port link-type hybrid port hybrid vlan 1 untagged # return
The output shows that:
is removed from VLAN 10.
The port link type and PVID of do not change.
Related commands
port private-vlan host
port private-vlan promiscuous
port private-vlan trunk promiscuous
private-vlan (VLAN view)
private-vlan isolated
private-vlan primary