148
Step Command
Remarks
19.
(Optional.) Configure Layer 3
communication between the
specified secondary VLANs.
a.
Enter VLAN interface
view of the primary VLAN
interface:
interface vlan-interface
vlan-id
b.
Enable Layer 3
communication between
secondary VLANs that
are associated with the
primary VLAN:
private-vlan secondary
vlan-id-list
c.
Assign an IPv4 address
to the primary VLAN
interface:
ip
address
ip-address
{
mask-length
|
mask
}
[
sub
]
d.
Assign an IPv6 address
to the primary VLAN
interface:
ipv6 address
{
ipv6-address
prefix-length
|
ipv6-address
/
prefix-lengt
h
}
e.
Enable local proxy ARP:
local-proxy-arp
enable
f.
Enable local proxy ND:
local-proxy-nd
enable
Use substeps a, b, c, and e for
devices that run IPv4 protocols.
Use substeps a, b, d, and f for
devices that run IPv6 protocols.
By default:
•
Secondary VLANs cannot
communicate with each
other at Layer 3.
•
No IP address is configured
for a VLAN interface.
•
Local proxy ARP and local
proxy ND are disabled.
Displaying and maintaining the private VLAN
Execute
display
commands in any view.
Task Command
Display information about primary VLANs and the
secondary VLANs associated with each primary VLAN.
display private-vlan
[
primary-vlan-id
]
Private VLAN configuration examples
Promiscuous port configuration example
Network requirements
As shown in
, configure the private VLAN feature to meet the following requirements:
•
On Device B, VLAN 5 is a primary VLAN that is associated with secondary VLANs 2 and 3.
GigabitEthernet 1/0/5 is in VLAN 5. GigabitEthernet 1/0/2 is in VLAN 2. GigabitEthernet 1/0/1 is
in VLAN 3.
