164
Step Command
Remarks
14.
Enter Layer 2 Ethernet
interface view or Layer 2
aggregate interface view.
interface
interface-type
interface-number
N/A
15.
Configure the downlink port
to operate in host or trunk
secondary mode.
•
Configure the downlink port to
operate in host mode:
port private-vlan host
•
Configure the downlink port to
operate in trunk secondary
mode:
port private-vlan
vlan-id-list
trunk secondary
By default, an interface does not
operate in host or trunk secondary
mode.
16.
Enter primary VLAN view.
vlan
vlan-id
N/A
17.
Associate the primary VLAN
with the specified secondary
VLANs.
private-vlan secondary
vlan-id-list
By default, a primary VLAN is not
associated with any secondary
VLANs.
18.
Return to system view.
quit
N/A
19.
(Optional.) Configure Layer 3
communication between the
specified secondary VLANs.
a.
Enter VLAN interface view
of the primary VLAN
interface:
interface vlan-interface
vlan-id
b.
Enable Layer 3
communication between
secondary VLANs that are
associated with the
primary VLAN:
private-vlan secondary
vlan-id-list
c.
Assign an IPv4 address to
the primary VLAN
interface:
ip
address
ip-address
{
mask-length
|
mask
}
[
sub
]
d.
Assign an IPv6 address to
the primary VLAN
interface:
ipv6 address
{
ipv6-address
prefix-length
|
ipv6-address
/
prefix-lengt
h
}
e.
Enable local proxy ARP:
local-proxy-arp
enable
f.
Enable local proxy ND:
local-proxy-nd
enable
Use substeps a, b, c, and e for
devices that run IPv4 protocols.
Use substeps a, b, d, and f for
devices that run IPv6 protocols.
By default:
•
Secondary VLANs cannot
communicate with each other
at Layer 3.
•
No IP address is configured for
a VLAN interface.
•
Local proxy ARP and local
proxy ND are disabled.