Reference Guide
•
Promiscuous port
: A promiscuous port is a port that is allowed to communicate with any other port type.
•
Trunk port
: A trunk port carries VLAN traffic across switches:
– A trunk port in a PVLAN is always tagged.
– A trunk port in Tagged mode carries primary or secondary VLAN traffic. The tag on the packet helps
identify the VLAN to which the packet belongs.
– A trunk port can also belong to a regular VLAN (non-private VLAN).
ip local-proxy-arp
Enable/disable Layer 3 communication between secondary VLANs in a private VLAN.
S4820T
Syntax
[no] ip local-proxy-arp
To disable Layer 3 communication between secondary VLANs in a private VLAN, use the no
ip local-proxy-arp
command in INTERFACE VLAN mode for the primary VLAN.
To disable Layer 3 communication in a particular secondary VLAN, use the no ip local-
proxy-arp command in INTERFACE VLAN mode for the selected secondary VLAN.
NOTE: Even after you disable ip-local-proxy-arp (use no ip-local-proxy-
arp) in a secondary VLAN, Layer 3 communication may happen between some secondary
VLAN hosts, until the address resolution protocol (ARP) timeout happens on those
secondary VLAN hosts.
Defaults Layer 3 communication is disabled between secondary VLANs in a private VLAN.
Command Modes INTERFACE VLAN
Command History
This guide is platform-specific. For command information about other platforms, refer to the
relevant
FTOS Command Line Reference Guide
.
The following is a list of the FTOS version history for this command.
Version 8.3.19.0 Introduced on the S4820T.
Version 8.3.11.1 Introduced on the Z9000.
Version 8.3.7.0 Introduced on the S4810.
Version 7.8.1.0 Introduced on the C-Series and S-Series.
Related
Commands
private-vlan mode — sets the mode of the selected VLAN to community, isolated, or primary.
private-vlan mapping secondary-vlan — maps secondary VLANs to the selected primary
VLAN.
show arp — displays the ARP table.
show interfaces private-vlan — displays the type and status of the PVLAN interfaces.
show vlan private-vlan — displays the PVLANs and/or interfaces that are part of a PVLAN.
switchport mode private-vlan — sets PVLAN mode of the selected port.
1072










