NTS: UNI-ENI Vlans vs Private Vlans

UNI-ENI Vlans vs Private Vlans

---

UNI-ENI Vlans (or just UNI Vlans)

Types

• Isolated Vlans
• Community Vlans

Characteristics

• Configuration happens under the Vlan
• Port configuration doesn't include Vlan type
• Each port can include many UNI-ENI Vlans
• Apply to access, trunk, tunnel ports
• There is only local significance per switch
• L3 config applies to each Vlan separately
• MAC addresses are learned on each vlan separately 

Configuration

IOS
ME-3400(config)#vlan 150
ME-3400(config-vlan)#uni-vlan ?
  community  UNI/ENI community VLAN
  isolated   UNI/ENI isolated VLAN



IOS
vlan 150
 uni-vlan community


Verification

IOS
ME-3400#sh vlan uni-vlan type

Vlan Type
---- -----------------
1    UNI isolated
150  UNI isolated
1301 UNI community
1302 UNI community

---

Private Vlans

Types

• Primary Vlan
• Secondary Vlans
• Isolated Vlans
• Community Vlans

Characteristics

• Configuration happens under the Vlan and under the Port
• Port configuration includes a pair of Private Vlans
• Each port can include only one pair of Private Vlans
• Apply only to access ports
• There can be global significance between multiple trunked switches
• VTPv3 required to transfer them automatically across switches
• L3 config applies to Primary Vlan only
• MAC addresses are replicated from Secondary to Primary Vlans

Configuration

IOS
vlan 100
  private-vlan primary
  private-vlan association 200,300
!
vlan 200
  private-vlan isolated
!
vlan 300
  private-vlan community
!
interface GigabitEthernet0/7
 port-type nni
 switchport private-vlan mapping 100 200,300
 switchport mode private-vlan promiscuous
!
interface GigabitEthernet0/11
 switchport private-vlan host-association 100 200
 switchport mode private-vlan host
!
interface GigabitEthernet0/12
 switchport private-vlan host-association 100 300
 switchport mode private-vlan host

Primary vlan is configured on every type of port.


Verification

IOS
ME-3400#sh vlan private-vlan

Primary Secondary Type              Ports
------- --------- ----------------- ------------------------------------------
100     200       isolated          Gi0/7, Gi0/11
100     300       community         Gi0/7, Gi0/12

---