Reference Guide

Private VLAN (PVLAN) | 1185
To disable Layer 3 communication between secondary VLANs in a private VLAN,
use the
no ip local-proxy-arp command in the INTERFACE VLAN mode for the
primary VLAN.
To disable Layer 3 communication in a particular secondary VLAN, use the
no ip
local-proxy-arp
command in the INTERFACE VLAN mode for the selected
secondary VLAN.
Note: Even after
ip-local-proxy-arp is disabled (no ip-local-proxy-arp) in a secondary
VLAN, Layer 3 communication may happen between some secondary VLAN hosts,
until the ARP timeout happens on those secondary VLAN hosts.
Defaults
Layer 3 communication is disabled between secondary VLANs in a private VLAN.
Command Modes
INTERFACE VLAN
Command
History
Related
Commands
private-vlan mode
c s
Set the PVLAN mode of the selected VLAN to community, isolated, or primary.
Syntax
[no] private-vlan mode {community | isolated | primary
}
To remove the PVLAN configuration, use the
no private-vlan mode {community |
isolated | primary} command syntax.
Parameters
Defaults
none
Version 8.3.19.0 Introduced on S4820T
Version 8.3.7.0 Introduced on S4810
Version 7.8.1.0 Introduced on C-Series and S-Series
private-vlan mode Set the mode of the selected VLAN to community, isolated, or
primary.
private-vlan mapping
secondary-vlan
Map secondary VLANs to the selected primary VLAN.
show arp Display the ARP table.
show interfaces private-vlan Display type and status of PVLAN interfaces.
show vlan private-vlan Display PVLANs and/or interfaces that are part of a PVLAN.
switchport mode
private-vlan
Set the PVLAN mode of the selected port.
community
Enter community to set the VLAN as a community VLAN, as described above.
isolated
Enter isolated to configure the VLAN as an isolated VLAN, as described above.
primary
Enter primary to configure the VLAN as a primary VLAN, as described above.