Dell SmartFabric OS10 User Guide Release 10.5.4

Configure a PVLAN domain

This section describes how to configure a PVLAN domain.

1. Configure a primary VLAN.
   1. Create a VLAN.

      OS10# configure terminal
      OS10(config)# interface vlan 10

   2. Configure the VLAN mode as primary VLAN.

      OS10(conf-if-vl-10)# private-vlan mode primary

   3. Configure a promiscuous port.

      OS10(config)# interface ethernet 1/1/1
      OS10(conf-if-eth1/1/1)# private-vlan mode promiscuous
      OS10(conf-if-eth1/1/1)# switchport mode trunk
      OS10(conf-if-eth1/1/1)# switchport trunk allowed vlan 10

2. Create an isolated VLAN.
   1. Create a VLAN.

      OS10(config)# interface vlan 20

   2. Configure the PVLAN mode as an isolated VLAN.

      OS10(conf-if-vl-20)# private-vlan mode isolated

   3. Configure a secondary port.
      Configure the Switchport mode as trunk to tag the port in multiple VLANs.

      OS10(config)# interface ethernet 1/1/2
      OS10(conf-if-eth1/1/2)# switchport mode trunk
      OS10(conf-if-eth1/1/2)# private-vlan mode secondary-port
      

   4. Associate the secondary port to the isolated VLAN.

      OS10(conf-if-eth1/1/2)# switchport trunk allowed vlan 20

3. Create a community VLAN.
   1. Create a VLAN.

      OS10(config)# interface vlan 30

   2. Configure the PVLAN mode as a community VLAN.

      OS10(conf-if-vl-30)# private-vlan mode community

   3. Configure a secondary port.

      OS10(config)# interface ethernet 1/1/3
      OS10(conf-if-eth1/1/3)# switchport mode trunk
      OS10(conf-if-eth1/1/3)# private-vlan mode secondary-port
      

   4. Associate the secondary port to the community VLAN.

      OS10(conf-if-eth1/1/2)# switchport trunk allowed vlan 30

4. Associate the list of secondary VLANs to the primary VLAN.

   OS10# configure terminal
   OS10(config)# interface vlan 10
   OS10(conf-if-vl-10)# private-vlan mapping secondary-vlans 20, 30

   OS10# show vlan private-vlan mapping
   
   Private Vlan:
    Primary   : 10
    Isolated  : 20
    Community : 30

   OS10# show vlan private-vlan
   
    Primary Secondary Type      Active Ports
    ------- --------- --------- ------ --------------------------------------------
    10                Primary   Yes    Eth1/1/1,1/1/5
            20        Isolated  Yes    Eth1/1/2
            30        Community Yes    Eth1/1/3

   OS10# show vlan
   
   Codes: * - Default VLAN, M - Management VLAN, R - Remote Port Mirroring VLANs,
          @ – Attached to Virtual Network, P - Primary, C - Community, I - Isolated
   Q: A - Access (Untagged), T - Tagged
       NUM    Status    Description                     Q Ports
   *   1      Active                                    A Eth1/1/4,1/1/6-1/1/32
   P   10     Active                                    A Eth1/1/1
                                                        T Eth1/1/5
   I   20     Active                                    T Eth1/1/2
   C   30     Active                                    A Eth1/1/3