Command Line Reference Guide

1092 | Private VLAN (PVLAN)
www.dell.com | support.dell.com
Isolated VLAN:
An isolated VLAN is a secondary VLAN of the primary VLAN:
• Ports in an isolated VLAN cannot talk to each other. Servers would be mostly connected to
isolated VLAN ports.
• Isolated ports can talk to promiscuous ports in the primary VLAN, and vice-versa.
Port types:
• Community port: A community port is, by definition, a port that belongs to a community VLAN
and is allowed to communicate with other ports in the same community VLAN and with
promiscuous ports.
• Isolated port: An isolated port is, by definition, a port that, in Layer 2, can only communicate
with promiscuous ports that are in the same PVLAN.
• Promiscuous port: A promiscuous port is, by definition, a port that is allowed to communicate
with any other port type.
• Trunk port: A trunk port, by definition, carries VLAN traffic across switches:
• A trunk port in a PVLAN is always tagged.
• Primary or secondary VLAN traffic is carried by the trunk port in tagged mode. The tag on the
packet helps identify the VLAN to which the packet belongs.
• A trunk port can also belong to a regular VLAN (non-private VLAN).
ip local-proxy-arp
c s
Enable/disable Layer 3 communication between secondary VLANs in a private VLAN.
Syntax
[no] ip local-proxy-arp
To disable Layer 3 communication between secondary VLANs in a private VLAN, use the no ip
local-proxy-arp command in the INTERFACE VLAN mode for the primary VLAN.
To disable Layer 3 communication in a particular secondary VLAN, use the no ip local-proxy-arp
command in the INTERFACE VLAN mode for the selected secondary VLAN.
Note: Even after ip-local-proxy-arp is disabled (no ip-local-proxy-arp) in a secondary VLAN, Layer
3 communication may happen between some secondary VLAN hosts, until the ARP timeout happens
on those secondary VLAN hosts.
Defaults
Layer 3 communication is disabled between secondary VLANs in a private VLAN.
Command Modes
INTERFACE VLAN
Command
History
Related
Commands
Version 7.8.1.0 Introduced on C-Series and S-Series
private-vlan mode Set the mode of the selected VLAN to community, isolated, or primary.
private-vlan mapping secondary-vlan Map secondary VLANs to the selected primary VLAN.
show arp Display the ARP table.
show interfaces private-vlan Display type and status of PVLAN interfaces.
show vlan private-vlan Display PVLANs and/or interfaces that are part of a PVLAN.
switchport mode private-vlan Set the PVLAN mode of the selected port.