179
Step Command Remarks
19. Return to system view.
quit
N/A
20. (Optional.) Configure
Layer 3 communication
between the specified
secondary VLANs.
a Enter VLAN interface view of
the primary VLAN interface:
interface vlan-interface
interface-number
b Enable Layer 3 communication
between secondary VLANs that
are associated with the primary
VLAN:
private-vlan secondary
vlan-id-list
c Assign an IPv4 address to the
primary VLAN interface:
ip address ip-address
{ mask-length | mask } [ sub ]
d Assign an IPv6 address to the
primary VLAN interface:
ipv6 address { ipv6-address
prefix-length |
ipv6-address/prefix-length }
e Enable local proxy ARP:
local-proxy-arp enable
f Enable local proxy ND:
local-proxy-nd enable
Use substeps a, b, c, and e for
devices that run IPv4 protocols.
Use substeps a, b, d, and f for
devices that run IPv6 protocols.
By default:
• Secondary VLANs cannot
communicate with each
other at Layer 3.
• No IP address is configured
for a VLAN interface.
• Local proxy ARP and ND
are disabled.
For more information about local
proxy ARP and ND, see Layer
3—IP Services Configuration
Guide. For more information
about the
local-proxy-arp
enable
and
local-proxy-nd
enable
commands, see Layer
3—IP Services Command
Reference.
Displaying and maintaining the private VLAN
Execute display commands in any view.
Task Command
Display information about primary VLANs and the
secondary VLANs associated with each primary VLAN.
display private-vlan
[ primary-vlan-id ]
Private VLAN configuration examples
Promiscuous port configuration example
Network requirements
As shown in Figure 59, configure the private VLAN feature to meet the following requirements:
• On Device B, VLAN 5 is a primary VLAN that is associated with secondary VLANs 2 and 3.
Ten-GigabitEthernet 1/0/5 is in VLAN 5. Ten-GigabitEthernet 1/0/2 is in VLAN 2.
Ten-GigabitEthernet 1/0/3 is in VLAN 3.
• On Device C, VLAN 6 is a primary VLAN that is associated with secondary VLANs 3 and 4.
Ten-GigabitEthernet 1/0/5 is in VLAN 6. Ten-GigabitEthernet 1/0/3 is in VLAN 3.
Ten-GigabitEthernet 1/0/4 is in VLAN 4.
• Device A is aware of only VLAN 5 on Device B and VLAN 6 on Device C.