Private vlan

Topology

pvlan1.png

Task

  1. Assign Linux2 in isolated vlan 200.
  2. Assign Linux 3 and 4 in community vlan 300.
  3. Assign e0/0 of Sw in promiscuous vlan 100.

Change VTP mode to transparent

Switch(config)#vtp mode transparent
Setting device to VTP Transparent mode for VLANS.
Switch(config)#

Create vlan and assign them to isolated and community

Switch(config)#vlan 200
Switch(config-vlan)#private-vlan isolated
Switch(config-vlan)#vlan 300
Switch(config-vlan)#private-vlan community
Switch(config-vlan)#

Create vlan 100 and assign as primary and associate secondary vlans to it


Switch(config)#vlan 100
Switch(config-vlan)#private-vlan primary 
Switch(config-vlan)#private-vlan association 200,300
Switch(config-vlan)#

Assign vlan isolated vlan and community vlan


Switch(config)#int e1/0
Switch(config-if)#switchport mode private-vlan host
Switch(config-if)#switchport private-vlan host-association 100 200
Switch(config-if)#exit
Switch(config)#int range e2/0, e3/0
Switch(config-if-range)#switchport mode private-vlan host
Switch(config-if-range)#switchport private-vlan host-association 100 300

Assign e0/0 of Sw to promiscuous

Switch(config)#int e0/0
Switch(config-if)#switchport mode private-vlan promiscuous
Switch(config-if)#switchport private-vlan mapping 100 200,300

Additional task: Configure two e1/1 and e1/2 to be protected ports
Host connected to the same vlan cannot communicate with each other that has protected ports, protected ports to non-protected ports have normal communication.


Switch(config)#int range e1/1-2
Switch(config-if-range)#switchport protected
Switch(config-if-range)#end
Advertisement

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s