Reference Guide

A trunk port in a PVLAN is always tagged.
Primary or secondary VLAN traffic is carried by the trunk port in Tagged mode. The tag on the
packet helps identify the VLAN to which the packet belongs.
A trunk port can also belong to a regular VLAN (non-private VLAN).
ip local-proxy-arp
Enable/disable Layer 3 communication between secondary VLANs in a private VLAN.
S5000
Syntax
[no] ip local-proxy-arp
To disable Layer 3 communication between secondary VLANs in a private VLAN,
use the no ip local-proxy-arp command in INTERFACE VLAN mode for the
primary VLAN.
To disable Layer 3 communication in a particular secondary VLAN, use the no ip
local-proxy-arp command in INTERFACE VLAN mode for the selected
secondary VLAN.
NOTE: Even after you disable ip-local-proxy-arp (use no ip-local-
proxy-arp
) in a secondary VLAN, Layer 3 communication may happen
between some secondary VLAN hosts, until the address resolution protocol
(ARP) timeout happens on those secondary VLAN hosts.
Defaults Layer 3 communication is disabled between secondary VLANs in a private VLAN.
Command
Modes
INTERFACE VLAN
Command
History
Version 9.0(1.3) Introduced on the S5000.
Related
Commands
private-vlan mode – sets the mode of the selected VLAN to community, isolated,
or primary.
private-vlan mapping secondary-vlan – maps secondary VLANs to the selected
primary VLAN.
show arp – displays the ARP table.
show interfaces private-vlan – displays the type and status of the PVLAN interfaces.
show vlan private-vlan – displays the PVLANs and/or interfaces that are part of a
PVLAN.
switchport mode private-vlan – sets PVLAN mode of the selected port.
1140
Private VLAN (PVLAN)