Users Guide

1 Secondary-port
* 2 -
vlt-port-channel ID : 30
VLT Unit ID Configured port-mode
----------------------------------------------------------------------------
1 Secondary-port
* 2 -
● To view VLAN mode configuration mismatch:
OS10# show vlt 1 mismatch private-vlan vlan-mode
Private VLAN mode mismatch:
VLAN: 10
VLT Unit ID Configured PVLAN mode
----------------------------------------------------------------------------
1 Isolated
* 2 Community
Interaction with other features
Port security
OS10 supports the following port security features on promiscuous, secondary, and ISL ports: MAC address learning limit, sticky
MAC, MAC address movement control, and MAC address aging.
For MAC address movement between secondary ports that are associated with different secondary VLANs within the PVLAN
domain:
● The shutdown-original and shutdown-offending violation actions are supported.
● The drop and drop-and-log violation actions are not supported.
For more information on the Port Security feature, see Port security.
L3 interfaces, protocols, and applications
OS10 supports configuring IP addresses, both IPv4 and IPv6 addresses, only on primary VLANs including secondary IP
addresses. Secondary VLANs are L2 VLANs.
In a PVLAN, Border Gateway Protocol (BGP), Open Shortest Path First (OSPF), and VRRP are supported only on the primary
VLAN.
NOTE:
Even though you can configure VRRP only on the primary VLAN, the system adds virtual MAC address entries for
that VRRP group in the TCAM table for both the primary and secondary VLANs. Enabling multiple PVLAN domains with
VRRP groups consumes a significant amount of TCAM space.
OS10 supports only the default VRF in a PVLAN domain. Nondefault VRF is not supported.
Spanning Tree Protocol
In a PVLAN, Rapid-PVST, RSTP, and MSTP are supported on the primary and secondary VLANs. Dell Technologies recommends
that if you connect the secondary ports to servers or host devices and not to a switch:
● Configure secondary ports as edge ports for faster convergence.
● Enable BPDU guard to prevent loops that might occur because of misconfigurations.
NOTE:
If you enable MSTP, ensure that all VLANs in the PVLAN domain, including the primary and associated secondary
VLANs, are mapped to a single MSTP instance.
Address Resolution Protocol
For communication between the PVLAN secondary port-connected devices, OS10 uses the Local Proxy ARP feature that Linux
supports.
Layer 2
671