VLT LAG Mode PVLAN Mode of VLT VLAN ICL VLANMembership MacSynchronizationPeer1 Peer2 Peer1 Peer2Access Access Secondary(Community)Secondary(Community)No No- Primary VLAN Y - Primary VLAN X No NoPromiscuousAccess Primary Secondary No NoTrunk Access Primary/Normal Secondary No NoConfiguring a VLT VLAN or LAG in a PVLANYou can configure the VLT peers or nodes in a private VLAN (PVLAN). Because the VLT LAG interfaces areterminated on two different nodes, PVLAN configuration of VLT VLANs and VLT LAGs are symmetricaland identical on both the VLT peers. PVLANs provide Layer 2 isolation between ports within the sameVLAN. A PVLAN partitions a traditional VLAN into subdomains identified by a primary and secondary VLANpair. With VLT being a Layer 2 redundancy feature, support for configuration of VLT nodes in a PVLANenables Layer 2 security functionalities to be achieved. This section contains the following topics thatdescribe how to configure a VLT VLAN or a VLT LAG (VLTi link) and assign that VLT interface to a PVLAN.Creating a VLT LAG or a VLT VLAN1. Configure the port channel for the VLT interconnect on a VLT switch and enter interfaceconfiguration modeCONFIGURATION modeinterface port-channel id-number.Enter the same port-channel number configured with the peer-link port-channel command asdescribed in Enabling VLT and Creating a VLT Domain.NOTE: To be included in the VLTi, the port channel must be in Default mode (no switchportor VLAN assigned).2. Remove an IP address from the interface.INTERFACE PORT-CHANNEL modeno ip address3. Add one or more port interfaces to the port channel.INTERFACE PORT-CHANNEL modechannel-member interfaceinterface: specify one of the following interface types:• 1-Gigabit Ethernet: Enter gigabitethernet slot/port.• 10-Gigabit Ethernet: Enter tengigabitethernet slot/port.4. Ensure that the port channel is active.Virtual Link Trunking (VLT) 891
