Dell SmartFabric OS10 User Guide Release 10.5.3

Configuration notes

• Do not configure the default VLAN as a PVLAN, primary or secondary.
• Do not configure a PVLAN secondary port as a member of more than one VLAN within the same PVLAN domain.
• You can configure a regular VLAN as a PVLAN only when it does not have any member ports associated with it. Remove the member ports from a VLAN before you configure it as a PVLAN.
• To convert a PVLAN to a regular VLAN, you must remove the PVLAN mode. Ensure that you remove the member ports from the PVLAN and the primary and secondary VLAN mapping before you remove the PVLAN mode.
• You can configure an L2 switch port as a PVLAN port using the private-vlan mode {promiscuous | secondary-port} command. To convert the PVLAN port back to a regular L2 port, ensure that the port is not part of any PVLAN.
• You can configure 802.1x authentication on PVLAN member ports.
• For scaled L2 deployments, configure L2 VLAN scale profile using the scale-profile vlan command to scale the VLANs in an optimal way.
• If L3 routing is required in an L2-scale profile, use the mode L3 command in the primary VLAN.
• You cannot configure PVLAN and virtual extensible LAN (VXLAN) on the same set of VLANs and ports.
• Enable local proxy ARP and configure an IPv4 address on the primary VLAN for IPv4 communication between devices that are connected to different secondary VLANs or isolated ports within the same PVLAN.
• Dell Technologies recommends the following:
  • Enable peer routing in a VLT topology.
  • Configure unique, static MAC addresses in a PVLAN domain including all the associated VLANs.
• Associating a PVLAN port, secondary or promiscuous, to a VLAN consumes additional hardware resources.
• For information about PVLAN interaction with other features, see PVLAN and other features.