Administrator Guide

● The S4810 ports would have the same intra-switch communication characteristics as described for the Z9500.
● For transmission between switches, tagged packets originating from host PVLAN ports in one secondary VLAN and destined
for host PVLAN ports in the other switch travel through the promiscuous ports in the local VLAN 4000 and then through the
trunk ports (1/25 in each switch).
Inspecting the Private VLAN Configuration
The standard methods of inspecting configurations also apply in PVLANs.
To inspect your PVLAN configurations, use the following commands.
● Display the specific interface configuration.
INTERFACE mode and INTERFACE VLAN mode
show config
● Inspect the running-config, and, with the grep pipe option, display a specific part of the running-config.
show running-config | grep string
The following example shows the PVLAN parts of the running-config from the S50V switch in the topology diagram
previously shown.
● Display the type and status of the configured PVLAN interfaces.
show interfaces private-vlan [interface interface]
This command is specific to the PVLAN feature.
For more information, refer to the Security chapter in the Dell EMC Networking OS Command Line Reference Guide.
● Display the configured PVLANs or interfaces that are part of a PVLAN.
show vlan private-vlan [community | interface | isolated | primary | primary_vlan |
interface interface]
This command is specific to the PVLAN feature.
The following examples show the results of using this command without the command options on the C300 and S50V
switches in the topology diagram previously shown.
● Display the primary-secondary VLAN mapping. The following example shows the output from the S50V.
show vlan private-vlan mapping
This command is specific to the PVLAN feature.
The show arp and show vlan commands are revised to display PVLAN data.
The following example shows viewing a private VLAN.
c300-1#show vlan private-vlan
Primary Secondary Type Active Ports
------- --------- --------- ------ --------------
4000 Primary Yes Te 1/1/1,2,5
4001 Community Yes Te 4/1/1,2
4002 Community Yes Te 4/24/1,4
4003 Isolated Yes Te 1/24/1,4
The following example shows using the show vlan private-vlan mapping command.
S50-1#show vlan private-vlan mapping
Private Vlan:
Primary : 4000
Isolated : 4003
Community : 4001
NOTE: In the following example, notice the addition of the PVLAN codes – P, I, and C – in the left column.
The following example shows viewing the VLAN status.
S50V#show vlan
Codes: * - Default VLAN, G - GVRP VLANs, P - Primary, C - Community, I - Isolated
Q: U - Untagged, T - Tagged
x - Dot1x untagged, X - Dot1x tagged
688
Private VLANs (PVLAN)