Users Guide
no shutdown
private-vlan mode secondary-port
OS10(conf-if-vl-20)#
View PVLAN information
View PVLAN mapping information
OS10# show vlan private-vlan mapping
Private Vlan:
 Primary   : 10
 Isolated  : 20
 Community : 30
OS10# show vlan private-vlan
 Primary Secondary Type      Active Ports
 ------- --------- --------- ------ --------------------------------------------
 10                Primary   Yes    Eth1/1/1,1/1/5
         20        Isolated  Yes    Eth1/1/2
         30        Community Yes    Eth1/1/3
OS10# show vlan
Codes: * - Default VLAN, M - Management VLAN, R - Remote Port Mirroring VLANs,
       @ – Attached to Virtual Network, P - Primary, C - Community, I - Isolated
Q: A - Access (Untagged), T - Tagged
    NUM    Status    Description                     Q Ports
*   1      Active                                    A Eth1/1/4,1/1/6-1/1/32
P   10     Active                                    A Eth1/1/1
                                                     T Eth1/1/5
I   20     Active                                    T Eth1/1/2
C   30     Active                                    A Eth1/1/3
View replicated MAC addresses
MAC addresses that are statically configured or dynamically learned are shared between primary and secondary VLANs. The
show mac address-table command shows the VLAN where the MAC address was originally learned.
In the following example, the term pv vlan-id indicates the VLAN where the MAC address is originally learned:
● MAC address 00:00:01:01:01:10 learned from primary VLAN replicates to the secondary VLANs.
● MAC addresses 00:00:01:01:01:20 and 00:00:01:01:01:30 learned from the secondary VLANs replicate to the
primary VLAN.
OS10# show mac address-table
Codes: pv <vlan id> private vlan where the mac is originally learnt
VlanId Mac Address        Type    Interface
10     00:00:01:01:01:10  dynamic ethernet1/1/1
20     00:00:01:01:01:10  dynamic ethernet1/1/1 pv 10
30     00:00:01:01:01:10  dynamic ethernet1/1/1 pv 10
10     00:00:01:01:01:20  dynamic ethernet1/1/2 pv 20
20     00:00:01:01:01:20  dynamic ethernet1/1/2
10     00:00:01:01:01:30  dynamic ethernet1/1/3 pv 30
30     00:00:01:01:01:30  dynamic ethernet1/1/3
The show ip arp and show ipv6 neighbors commands also display the VLAN where the MAC address is originally
learned.
View PVLAN ARP entries
Layer 2
671










