port private-vlan trunk promiscuous

Use port private-vlan trunk promiscuous to configure a port as a trunk promiscuous port of the specified VLANs and assign the port to these VLANs.

Use undo port private-vlan trunk promiscuous to cancel the trunk promiscuous attribute of a port in the specified VLANs.

Syntax

port private-vlan vlan-id-list trunk promiscuous

undo port private-vlan vlan-id-list trunk promiscuous

Default

A port is not a trunk promiscuous port of any VLANs.

Views

Layer 2 Ethernet interface view

Layer 2 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Parameters

vlan-id-list: Specifies a space-separated list of up to 10 primary VLAN items. Each item specifies a primary VLAN ID or a range of primary VLAN IDs in the form of vlan-id1 to vlan-id2. The value range for primary VLAN IDs is 1 to 4094. The value for the vlan-id2 argument must be equal to or greater than the value for the vlan-id1 argument. Though the system default VLAN (VLAN 1) is in the valid value range, it cannot be configured in the command.

Usage guidelines

If the specified VLANs are primary VLANs that have been associated with secondary VLANs, the command assigns the port to the associated secondary VLANs. Also, the following events occur:

• For an access port, the device performs the following operations:

  • Changes the port link type to hybrid. The PVID of the port does not change.

  • Assigns the port to the primary VLANs and the associated secondary VLANs as a tagged member.

• For a trunk port, the device does not change the port link type or PVID.

• For a hybrid port, the device does not change the port link type or PVID.

  • If the hybrid port has been a tagged or untagged member of part of the primary VLANs and their associated secondary VLANs, this member attribute remains in these VLANs. The device assigns the hybrid port to the rest of the primary VLANs and their associated secondary VLANs as a tagged member.

  • If the hybrid port does not allow any of the primary VLANs and their associated secondary VLANs, the device assigns the port to these VLANs as a tagged member.

The undo form of this command does not change the VLAN attributes (allowed secondary VLANs, port link type, and PVID) of the port.

If you execute the undo form of this command on a trunk promiscuous port, the command removes the port from the VLANs specified by the vlan-id-list argument.

You can configure the specified VLANs as primary VLANs before or after you execute this command.

This command is mutually exclusive with the port private-vlan host, port private-vlan promiscuous and port private-vlan trunk secondary commands.

For an uplink port to permit multiple primary VLANs, use the port private-vlan trunk promiscuous command to assign the port to these VLANs. The port can then transmit packets from these primary VLANs with VLAN tags. For an uplink port to permit only one primary VLAN, use the port private-vlan promiscuous command to assign the port to the VLAN. The port can then transmit packets from the primary VLAN without VLAN tags.

Examples

In this example, VLANs 2 and 3 are primary VLANs. VLAN 2 is associated with secondary VLAN 20. VLAN 3 is associated with secondary VLAN 30.

# Display information about Ten-GigabitEthernet 1/0/1.

<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] display this
#
interface Ten-GigabitEthernet1/0/1
 port link-mode bridge
#
return

# Configure Ten-GigabitEthernet 1/0/1 as a trunk promiscuous port of VLANs 2 and 3, and then verify the configuration.

[Sysname-Ten-GigabitEthernet1/0/1] port private-vlan 2 3 trunk promiscuous
[Sysname-Ten-GigabitEthernet1/0/1] display this
#
interface Ten-GigabitEthernet1/0/1
 port link-mode bridge
 port link-type hybrid
 port private-vlan 2 3 trunk promiscuous
 port hybrid vlan 2 3 20 30 tagged
 port hybrid vlan 1 untagged
#
return

The output shows that:

• Ten-GigabitEthernet 1/0/1 is a trunk promiscuous port of VLANs 2 and 3.

• Ten-GigabitEthernet1/0/1 is a tagged member of VLANs 2, 3, 20, and 30.

• The port link type of Ten-GigabitEthernet 1/0/1 is hybrid.

# Execute the undo port private-vlan trunk promiscuous command on Ten-GigabitEthernet 1/0/1, and then verify the configuration.

[Sysname-Ten-GigabitEthernet1/0/1] undo port private-vlan 2 3 trunk promiscuous
[Sysname-Ten-GigabitEthernet1/0/1] display this
#
interface Ten-GigabitEthernet1/0/1
 port link-mode bridge
 port link-type hybrid
 port hybrid vlan 20 30 tagged
 port hybrid vlan 1 untagged
#
return

The output shows that:

• Ten-GigabitEthernet 1/0/1 is removed from VLANs 2 and 3.

• Ten-GigabitEthernet 1/0/1 is a tagged member of VLANs 20 and 30.

• The port link type and PVID of Ten-GigabitEthernet 1/0/1 do not change.

Related commands

port private-vlan host

port private-vlan promiscuous

port private-vlan trunk secondary

private-vlan (VLAN view)

private-vlan primary