White Papers

• For transmission between switches, tagged packets originating from host PVLAN ports in one secondary VLAN and destined for host
PVLAN ports in the other switch travel through the promiscuous ports in the local VLAN 4000 and then through the trunk ports (0/25
in each switch).
Inspecting the Private VLAN Conguration
The standard methods of inspecting congurations also apply in PVLANs.
To inspect your PVLAN congurations, use the following commands.
• Display the specic interface conguration.
INTERFACE mode and INTERFACE VLAN mode
show config
• Inspect the running-cong, and, with the grep pipe option, display a specic part of the running-cong.
show running-config | grep string
The following example shows the PVLAN parts of the running-cong from the S5000–2 switch in the topology diagram previously
shown.
• Display the type and status of the congured PVLAN interfaces.
show interfaces private-vlan [interface interface]
This command is specic to the PVLAN feature.
For more information, refer to the Security chapter in the Dell Networking OS Command Line Reference Guide.
• Display the congured PVLANs or interfaces that are part of a PVLAN.
show vlan private-vlan [community | interface | isolated | primary | primary_vlan | interface
interface]
This command is specic to the PVLAN feature.
The following examples show the results of using this command without the command options on the S5000–1 switch in the topology
diagram previously shown.
• Display the primary-secondary VLAN mapping. The following example shows the output from the S5000–2.
show vlan private-vlan mapping
This command is specic to the PVLAN feature.
Examples of Viewing a Private VLAN using the show Commands
The show arp and show vlan commands are revised to display PVLAN data.
The following example shows the vlan private-vlan command output from S5000-1.
S5000-1#show vlan private-vlan
Primary Secondary Type Active Ports
------- --------- --------- ------ ----------
4000 Primary Yes Te 0/0,23,25
4001 Community Yes Te 4/0,23
4002 Community Yes Te 4/24,47
4003 Isolated Yes Te 0/24,47
The following example shows the show vlan private-vlan command output from S5000–2.
S5000-2#show vlan private-vlan
Primary Secondary Type Active Ports
------- --------- --------- ------ ----------
4000 Primary Yes Te 0/3,25
Private VLANs (PVLAN)
731