Dell S3048-ON, Configuration Manual

Page: 623 / 1036

In parallel, on S4810:
• Te 1/3 is a promiscuous port and Te 1/25 is a PVLAN trunk port, assigned to the primary VLAN 4000.
• Te 1/4-6 are host ports. Te 1/4 and Te 1/5 are assigned to the community VLAN 4001, while Te 1/6 is assigned to the isolated VLAN
4003.
The result is that:
• The S4810 ports would have the same intra-switch communication characteristics as described for the Z9500.
• For transmission between switches, tagged packets originating from host PVLAN ports in one secondary VLAN and destined for host
PVLAN ports in the other switch travel through the promiscuous ports in the local VLAN 4000 and then through the trunk ports (1/25
in each switch).
Inspecting the Private VLAN Configuration
The standard methods of inspecting configurations also apply in PVLANs.
To inspect your PVLAN configurations, use the following commands.
• Display the specific interface configuration.
INTERFACE mode and INTERFACE VLAN mode
show config
• Inspect the running-config, and, with the
grep pipe
option, display a specific part of the running-config.
show running-config | grep string
The following example shows the PVLAN parts of the running-config from the S50V switch in the topology diagram previously shown.
• Display the type and status of the configured PVLAN interfaces.
show interfaces private-vlan [interface interface ]
This command is specific to the PVLAN feature.
For more information, refer to the Security chapter in the Dell Networking OS Command Line Reference Guide .
• Display the configured PVLANs or interfaces that are part of a PVLAN.
show vlan private-vlan [community | interface | isolated | primary | primary_vlan | interface
interface ]
This command is specific to the PVLAN feature.
The following examples show the results of using this command without the command options on the C300 and S50V switches in the
topology diagram previously shown.
• Display the primary-secondary VLAN mapping. The following example shows the output from the S50V.
show vlan private-vlan mapping
This command is specific to the PVLAN feature.
Examples of Viewing a Private VLAN using the
show
Commands
The
show arp
and
show vlan
commands are revised to display PVLAN data.
The following example shows viewing a private VLAN.
c300-1#show vlan private-vlan
Primary Secondary Type Active Ports
------- --------- --------- ------ --------------
4000 Primary Yes Gi 1/1,23,25
4001 Community Yes Gi 4/1,23
4002 Community Yes Gi 4/24,47
4003 Isolated Yes Gi 1/24,47
Private VLANs (PVLAN) 623