Mapping Secondary VLAN to Primary VLAN by Multiple Promiscuous Ports

To map a secondary VLAN to a primary VLAN through multiple promiscuous ports, follow these example steps:
  1. Add the tagged ethernet ports to a VLAN.
  2. Configure the VLAN as isolated.
  3. Create a second VLAN.
  4. Configure the second VLAN as a primary VLAN in a PVLAN.
  5. Map the isolated VLAN to the primary VLAN with uplink-ports as promiscuous ports. All broadcast and unknown-unicast traffic from isolated VLAN ports will be sent to only promiscuous ports.

In the following example configuration, the isolated VLAN 100 has multiple promiscuous ports 1/1/3 and 1/1/4. 

device(config)# vlan 100
device(config-vlan-100)# pvlan type isolated
device(config-vlan-100)# tagged ethernet 1/1/1 to 1/1/2
device(config-vlan-100)# exit
device(config)# vlan 101
device(config-vlan-101)# pvlan type primary
device(config-vlan-101)# tagged ethernet 1/1/3 to 1/1/5
device(config-vlan-101)# pvlan map 100 ethernet 1/1/3
device(config-vlan-101)# pvlan map 100 ethernet 1/1/4
Parent topic: Multiple Promiscuous Ports Support in Private VLANs