Skip to content

Add Private VLAN (PVLAN) support - #223

Open
ed6869 wants to merge 5 commits into
aruba:masterfrom
ed6869:feature/pvlan
Open

Add Private VLAN (PVLAN) support#223
ed6869 wants to merge 5 commits into
aruba:masterfrom
ed6869:feature/pvlan

Conversation

@ed6869

@ed6869 ed6869 commented Jul 1, 2026

Copy link
Copy Markdown

Summary

Adds Private VLAN (PVLAN) configuration to the collection:

  • aoscx_vlan: pvlan_type (primary / isolated / community) and pvlan_association (VLAN id of the primary VLAN a secondary VLAN is associated with).
  • aoscx_interface: pvlan_port_type (promiscuous / secondary).

Together these allow a full PVLAN to be configured: a primary VLAN, one or more secondary (isolated/community) VLANs associated to it, and the promiscuous/secondary port assignments.

All changes are collection-only (the VLAN and Interface pyaoscx classes are generic); no SDK change is required.

Testing

Validated live on a CX6300 (FL.10.17, REST latest): create, idempotency and update of primary/secondary VLANs, the secondary-to-primary association and the interface port type. show running-config confirmed:

vlan 401
    private-vlan isolated primary-vlan 400
interface 1/1/5
    private-vlan port-type promiscuous

Sanity (pep8, pylint, validate-modules) passes for both modules.

Fixes #222

Note: this branch is based on feature/interface-physical (#167) as it extends the same aoscx_interface module; the interface diff will reduce to only C(pvlan_port_type) once #167 is merged.

ed6869 added 5 commits June 29, 2026 11:46
Expose pause/flow-control, EEE, FEC (error_control), speed downshift,
UDLD, loop protection, uRPF and IP MTU so they can be configured
through the interface module.

Signed-off-by: ed6869 <ed6869@mail.com>
…oping trust

Expose per-interface sFlow enable (other_config sflow-enabled), ARP
inspection trust and DHCPv4/DHCPv6 snooping trust and binding limits.
Validated live on a CX6300 (FL.10.17, REST latest): create, idempotency and
update; CLI rendered 'no sflow', 'arp inspection trust' and
'dhcpv4-snooping trust'.

Signed-off-by: ed6869 <ed6869@mail.com>
Add pvlan_type and pvlan_association to aoscx_vlan (primary/isolated/community
VLANs and secondary-to-primary association) and pvlan_port_type to
aoscx_interface (promiscuous/secondary). Validated live on a CX6300 (FL.10.17,
REST latest): create, idempotency and update; CLI rendered the private-vlan
lines and 'private-vlan port-type'.

Fixes aruba#222

Signed-off-by: ed6869 <ed6869@mail.com>
An empty string resets pvlan_port_type to unset (sent as null), so a port can
be returned to a regular (non Private VLAN) port. Validated live: set
promiscuous/secondary, clear and idempotent re-clear all behave correctly.

Signed-off-by: ed6869 <ed6869@mail.com>
Check that the primary VLAN referenced by pvlan_association exists before
making any change, so a secondary VLAN is not created when the association
would be rejected by the switch. Validated live: associating to a missing
primary now fails cleanly without leaving a stray VLAN behind.

Signed-off-by: ed6869 <ed6869@mail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add Private VLAN (PVLAN) support to aoscx_vlan and aoscx_interface

1 participant