S5500 Private vlan

[A]dis private-vlan 10

 Primary VLAN ID: 10

 Secondary VLAN ID: 2-3

 VLAN ID: 10

 VLAN type: Static

 Private VLAN type: Primary

 Route interface: Configured

 IPv4 address: 192.168.10.1

 IPv4 subnet mask: 255.255.255.0

 Description: VLAN 0010

 Name: VLAN 0010

 Tagged ports:

    None

 Untagged ports:

    GigabitEthernet1/0/1(U)            GigabitEthernet1/0/2(U)                        

    GigabitEthernet1/0/3(U)            GigabitEthernet1/0/4(U)                        

 VLAN ID: 2

 VLAN type: Static

 Private VLAN type: Isolated Secondary

 Route interface: Configured

 IPv4 address: 192.168.10.1

 IPv4 subnet mask: 255.255.255.0

 Description: VLAN 0002

 Name: VLAN 0002

 Tagged ports:

    None

 Untagged ports:

    GigabitEthernet1/0/1(U)            GigabitEthernet1/0/2(U)

 VLAN ID: 3

 VLAN type: Static

 Private VLAN type: Secondary

 Route interface: Configured

 IPv4 address: 192.168.10.1

 IPv4 subnet mask: 255.255.255.0

 Description: VLAN 0003

 Name: VLAN 0003

 Tagged ports:

    None

 Untagged ports:

    GigabitEthernet1/0/3(U)            GigabitEthernet1/0/4(U)

[A]dis ip int bri

*down: administratively down

(s): spoofing  (l): loopback

Interface          Physical Protocol IP address/Mask    VPN instance Description

MGE0/0/0           down     down     --                 --           --

Vlan10             up       up       192.168.10.1/24    --           --

Vlan100            up       up       192.168.100.1/24   --           --

请教：

1、Secondary VLAN 2  已经开启了同一Secondary VLAN内各端口二层隔离，可实际上PC2与PC3之间还是能ping通？

2、Primary VLAN 10  配置了IP，开了ARP代理，但PC2与PC4或PC5还是不通？