cancel
Showing results for 
Search instead for 
Did you mean: 

Private VLAN routing issue

Private VLAN routing issue

Andrew_Schulz1
New Contributor
I've configured a private VLAN for ports 1 and 2 so that they are isolated from one another. The configuration shown below is how I set it up, however, when I place a client on port 1 I can not ping the gateway.The client can ping the VLAN Mgmt99 IP: 10.10.99.6. Note port 48 is a trunk port to my core switch with the same Mgmt99 VLAN on it. I tried ipforwarding of mgmt99 vlan but that did not help.

create vlan "Mgmt99"
configure vlan Mgmt99 tag 99create vlan "Mgmt99_pv_isol"
configure vlan Mgmt99_pv_isol tag 199

create private-vlan "Mgmt99_PV"
configure private-vlan Mgmt99_PV add network Mgmt99

configure private-vlan Mgmt99_PV add subscriber Mgmt99_pv_isol

configure vlan Mgmt99 add ports 48 tagged (Trunk Port)

configure vlan Mgmt99_pv_isol add ports 1-2 untagged

configure vlan Mgmt99 ipaddress 10.10.99.6 255.255.255.0

configure iproute add default 10.10.99.1

Thanks for any suggestions.

6 REPLIES 6

Andrew_Schulz1
New Contributor
I get the following error when I add that config.

Error: Can't add ports because they already exist in a Subscriber VLAN.

Karthik_Mohando
Extreme Employee
Andrew,

Could you add the below config line and check.
"configure vlan Mgmt99 add ports 1 private-vlan translated"

GTM-P2G8KFN