I have cat 45 series as core and 37 series as distribution. my difficulty is I have got 2960 as access layer switchs which does not support pvlan. but still i can make protected ports in it. the other problem is I need comunity ports or nor matter a normal vlan ports to reach other very secure domains from those access layer switches. jer I know you can come up with a good solution for this.
this link helped a lot on configuring pvlan trunk but didn't yet get a clear picture