Inspecting The Private Vlan Configuration - Dell S3048-ON Configuration Manual

In parallel, on S4810:
• Te 1/3 is a promiscuous port and Te 1/25 is a PVLAN trunk port, assigned to the primary VLAN 4000.
• Te 1/4-6 are host ports. Te 1/4 and Te 1/5 are assigned to the community VLAN 4001, while Te 1/6 is assigned to the isolated VLAN
4003.
The result is that:
• The S4810 ports would have the same intra-switch communication characteristics as described for the Z9500.
• For transmission between switches, tagged packets originating from host PVLAN ports in one secondary VLAN and destined for host
PVLAN ports in the other switch travel through the promiscuous ports in the local VLAN 4000 and then through the trunk ports (1/25
in each switch).

Inspecting the Private VLAN Configuration

The standard methods of inspecting configurations also apply in PVLANs.
To inspect your PVLAN configurations, use the following commands.
• Display the specific interface configuration.
INTERFACE mode and INTERFACE VLAN mode
show config
• Inspect the running-config, and, with the grep pipe option, display a specific part of the running-config.
show running-config | grep string
The following example shows the PVLAN parts of the running-config from the S50V switch in the topology diagram previously shown.
• Display the type and status of the configured PVLAN interfaces.
show interfaces private-vlan [interface interface]
This command is specific to the PVLAN feature.
For more information, refer to the Security chapter in the Dell Networking OS Command Line Reference Guide.
• Display the configured PVLANs or interfaces that are part of a PVLAN.
show vlan private-vlan [community | interface | isolated | primary | primary_vlan | interface
interface]
This command is specific to the PVLAN feature.
The following examples show the results of using this command without the command options on the C300 and S50V switches in the
topology diagram previously shown.
• Display the primary-secondary VLAN mapping. The following example shows the output from the S50V.
show vlan private-vlan mapping
This command is specific to the PVLAN feature.
Examples of Viewing a Private VLAN using the show Commands
The show arp and show vlan commands are revised to display PVLAN data.
The following example shows viewing a private VLAN.
c300-1#show vlan private-vlan
Primary Secondary Type
------- --------- --------- ------ --------------
4000 Primary
4001 Community Yes
4002 Community Yes
4003 Isolated
Active Ports
Yes Gi 1/1,23,25
Gi 4/1,23
Gi 4/24,47
Yes Gi 1/24,47
Private VLANs (PVLAN) 623