Command Reference Guide

Private VLAN (PVLAN) | 1151
To disable Layer 3 communication between secondary VLANs in a private VLAN, use the no
ip local-proxy-arp
command in the INTERFACE VLAN mode for the primary VLAN.
To disable Layer 3 communication in a particular secondary VLAN, use the
no ip
local-proxy-arp
command in the INTERFACE VLAN mode for the selected secondary
VLAN.
Note: Even after
ip-local-proxy-arp is disabled (no ip-local-proxy-arp) in a secondary VLAN,
Layer 3 communication may happen between some secondary VLAN hosts, until the ARP
timeout happens on those secondary VLAN hosts.
Defaults
Layer 3 communication is disabled between secondary VLANs in a private VLAN.
Command Modes
INTERFACE VLAN
Command
History
Related
Commands
private-vlan mode
c s
Set the PVLAN mode of the selected VLAN to community, isolated, or primary.
Syntax
[no] private-vlan mode {community | isolated | primary
}
To remove the PVLAN configuration, use the
no private-vlan mode {community | isolated |
primary
} command syntax.
Parameters
Defaults
none
Command Modes
INTERFACE VLAN
Version 8.3.7.0 Introduced on S4810
Version 7.8.1.0 Introduced on C-Series and S-Series
private-vlan mode Set the mode of the selected VLAN to community, isolated, or
primary.
private-vlan mapping
secondary-vlan
Map secondary VLANs to the selected primary VLAN.
show arp Display the ARP table.
show interfaces private-vlan Display type and status of PVLAN interfaces.
show vlan private-vlan Display PVLANs and/or interfaces that are part of a PVLAN.
switchport mode
private-vlan
Set the PVLAN mode of the selected port.
community
Enter community to set the VLAN as a community VLAN, as described above.
isolated
Enter isolated to configure the VLAN as an isolated VLAN, as described above.
primary
Enter primary to configure the VLAN as a primary VLAN, as described above.