Users Guide

○ You can associate the PVLAN trunk port to both primary and secondary VLANs. This port carries traffic from both the
primary and secondary VLANs.
○ To configure a PVLAN trunk port, associate a regular tagged port that is not a promiscuous or secondary port to a VLAN
within a PVLAN domain. There are no specific CLI commands to configure a port as a PVLAN trunk port.
NOTE: OS10 supports MAC address movement within a PVLAN domain. MAC address movement is supported:
● From primary to secondary VLAN
● From secondary to primary VLAN
● Between secondary VLANs
The following figure shows the different components in a PVLAN domain.
Limitations
● OS10 does not support PVLANs on the S4200-ON and Z9300-ON series switches.
● Enabling multiple PVLAN domains with Virtual Router Redundancy Protocol (VRRP) groups consumes a significant amount
of TCAM space.
● If a packet enters through a VLAN and exits through another VLAN, the VLAN statistics counter increments the ingress
VLAN counter twice. The system does not update the egress VLAN counter.
● IPv6 communication is not supported between devices in:
○ Community and isolated VLANs
○ One community VLAN and another community VLAN
○ Isolated VLANs
Configuration notes
● Do not configure the default VLAN as a PVLAN, primary or secondary.
● Do not configure a PVLAN secondary port as a member of more than one VLAN within the same PVLAN domain.
664
Layer 2