https://community.extremenetworks.com/t5/extremeswitching-exos-switch/eaps-privatevlan/m-p/39288#M8627 Configuration for EAPS is same <BR /> <BR /> Creating and Configuring the EAPS Control VLAN1 You must create the EAPS control VLAN and configure the 802.1q tag and ring ports.<BR /> 2 Configure the control VLANs as part of the EAPS domain. Do this for both switches.<BR /> Switch 1 control VLAN configuration:<BR /> * SWITCH#1.5 # create vlan control-1<BR /> * SWITCH#1.6 # configure vlan control-1 tag 4001<BR /> * SWITCH#1.8 # configure vlan control-1 add port 4:1,4:2 tagged<BR /> * SWITCH#1.9 # configure eaps new-eaps add control vlan control-1<BR /> Switch 2 control VLAN configuration:<BR /> * SWITCH#2.5 # create vlan control-1<BR /> * SWITCH#2.6 # configure vlan control-1 tag 4001<BR /> * SWITCH#2.8 # configure vlan control-1 add port 4:1,4:2 tagged<BR /> * SWITCH#2.9 # configure eaps new-eaps add control vlan control-1<BR /> Enabling EAPS and Verify EAPS Status<BR /> 1 Enable the EAPS protocol and the EAPS domain.<BR /> 2 Confirm that the master node is in Complete state and its secondary port is blocking.<BR /> Switch 1 commands to enable EAPS and the domain:<BR /> * SWITCH#1.10 # enable eaps<BR /> * SWITCH#1.11 # enable eaps new-eaps<BR /> <BR /> Limitations with Pvlan:<BR /> EAPS control VLANs cannot be either subscriber or network VLANs.• EAPS can only be configured on network VLAN ports (and not on subscriber VLAN ports).<BR /> <BR /> To<BR /> support EAPS on the network VLAN, you must add all of the VLANs in the PVLAN to the EAPS ring.<BR /> Tue, 17 Mar 2015 16:29:00 GMT PARTHIBAN_CHINN 2015-03-17T16:29:00Z https://community.extremenetworks.com/t5/extremeswitching-exos-switch/eaps-privatevlan/m-p/39287#M8626 Does anyone have any samples of a switch on an EAPS ring that also has privatevlans on the subscriber ports for vlans that are trunked over the EAPS ring as the uplink? Tue, 17 Mar 2015 08:47:00 GMT https://community.extremenetworks.com/t5/extremeswitching-exos-switch/eaps-privatevlan/m-p/39287#M8626 Chris_Chance 2015-03-17T08:47:00Z https://community.extremenetworks.com/t5/extremeswitching-exos-switch/eaps-privatevlan/m-p/39288#M8627 Configuration for EAPS is same <BR /> <BR /> Creating and Configuring the EAPS Control VLAN1 You must create the EAPS control VLAN and configure the 802.1q tag and ring ports.<BR /> 2 Configure the control VLANs as part of the EAPS domain. Do this for both switches.<BR /> Switch 1 control VLAN configuration:<BR /> * SWITCH#1.5 # create vlan control-1<BR /> * SWITCH#1.6 # configure vlan control-1 tag 4001<BR /> * SWITCH#1.8 # configure vlan control-1 add port 4:1,4:2 tagged<BR /> * SWITCH#1.9 # configure eaps new-eaps add control vlan control-1<BR /> Switch 2 control VLAN configuration:<BR /> * SWITCH#2.5 # create vlan control-1<BR /> * SWITCH#2.6 # configure vlan control-1 tag 4001<BR /> * SWITCH#2.8 # configure vlan control-1 add port 4:1,4:2 tagged<BR /> * SWITCH#2.9 # configure eaps new-eaps add control vlan control-1<BR /> Enabling EAPS and Verify EAPS Status<BR /> 1 Enable the EAPS protocol and the EAPS domain.<BR /> 2 Confirm that the master node is in Complete state and its secondary port is blocking.<BR /> Switch 1 commands to enable EAPS and the domain:<BR /> * SWITCH#1.10 # enable eaps<BR /> * SWITCH#1.11 # enable eaps new-eaps<BR /> <BR /> Limitations with Pvlan:<BR /> EAPS control VLANs cannot be either subscriber or network VLANs.• EAPS can only be configured on network VLAN ports (and not on subscriber VLAN ports).<BR /> <BR /> To<BR /> support EAPS on the network VLAN, you must add all of the VLANs in the PVLAN to the EAPS ring.<BR /> Tue, 17 Mar 2015 16:29:00 GMT https://community.extremenetworks.com/t5/extremeswitching-exos-switch/eaps-privatevlan/m-p/39288#M8627 PARTHIBAN_CHINN 2015-03-17T16:29:00Z https://community.extremenetworks.com/t5/extremeswitching-exos-switch/eaps-privatevlan/m-p/39289#M8628 thanks for getting back to me, but you lost me at the end their i know how to setup the eaps ring as we have that existing, and i understand the control vlan can't be a pvlan thts obvious, but is it not possible to protect the subscriber vlans, i mean you would have to set 2 uplink ports for the pvlan somehow? Wed, 18 Mar 2015 09:48:00 GMT https://community.extremenetworks.com/t5/extremeswitching-exos-switch/eaps-privatevlan/m-p/39289#M8628 Chris_Chance 2015-03-18T09:48:00Z