Pvlan-configuration case

Topology:

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M02/43/73/wKioL1PbDkWxaz50AAMxv3v6Kjo148.jpg "Title =" pvlan.jpg "alt =" wkiol1pbdkwxaz50aamxv3v6kjo148.jpg "/>

Pvlan is mainly used to isolate hosts in broadcast domains to provide security.

Each pvlan includes two VLANs:

Primary VLAN (primary)

Secondary VLAN)

Auxiliary VLANs are divided:

Isolated VLAN (isolated)

Group VLAN (community)

There are two interface types in pvlan:

Host Port)

Promiscuous Port)

Communication can be established between the primary VLAN and the secondary VLAN, and the secondary VLAN cannot communicate with each other,

In the same auxiliary VLAN, the hosts in the group VLAN can communicate with each other, and the hosts in the isolated VLAN cannot communicate with each other.

1. Make the vswitch in VTP transparent mode

C3560G-01 # conf T.

C3560G-01 (config) # VTP mode transparent

2. Create primary VLAN 200, Community VLAN 201 202 203, and isolated VLAN 204.

And associate secondary VLAN 201 202 203 204 with primary VLAN 200

C3560G-01 (config) # VLAN 200

C3560G-01 (config-VLAN) # private-VLAN primary

C3560G-01 (config) # VLAN 201

C3560G-01 (config-VLAN) # private-VLAN community

C3560G-01 (config) # VLAN 202

C3560G-01 (config-VLAN) # private-VLAN community

C3560G-01 (config) # VLAN 203

C3560G-01 (config-VLAN) # private-VLAN community

C3560G-01 (config) # VLAN 204

C3560G-01 (config-VLAN) # private-VLAN isolated

C3560G-01 (config) # VLAN 200

C3560G-01 (config-VLAN) # private-VLAN Association add 201,202,203,204

3. Configure the interface type and add the interface to the VLAN

C3560G-01 (config) # int range G0/1-2

C3560G-01 (config-If) # switchport mode private-VLAN promiscuous

C3560G-01 (config-If) # switchport private-VLAN mapping 200 201,202,203,204

C3560G-01 (config) # int range G0/3-6

C3560G-01 (config-If) # switchport mode private-VLAN host

C3560G-01 (config-If) # switchport private-VLAN host-Association 200 201

C3560G-01 (config) # int range G0/7-10

C3560G-01 (config-If) # switchport mode private-VLAN host

C3560G-01 (config-If) # switchport private-VLAN host-Association 200 202

C3560G-01 (config) # int range G0/11-14

C3560G-01 (config-If) # switchport mode private-VLAN host

C3560G-01 (config-If) # switchport private-VLAN host-Association 200 203

C3560G-01 (config) # int range G0/15-18

C3560G-01 (config-If) # switchport mode private-VLAN host

C3560G-01 (config-If) # switchport private-VLAN host-Association 200 204

4. View

C3560G-01 # Show VLAN private-VLAN

Primary Secondary type ports

---------------------------------------------------------------------------

200 201 community g/1, G/2, G/3, G/4, G/5, G/6

200 202 community g/1, G/2, G/7, G/8, G/9, g/10

200 203 community g/1, G/2, G/11, G/12, G/13, G/14

200 204 isolated g/1, G/2, G/15, G/16, G/17, G/18

5. Test

Omitted!

This article is from the "xiaoxiaodong" blog, please be sure to keep this source http://xiaoxiaodong.blog.51cto.com/2809770/1533637