Private-Vlan (PVLAN)

Hosts(SWITCH)promiscuous

PRIMARY VLAN:-
-----------------
1)Promiscuous:-
this is associated to Internet facing
Hosts-------to----> promiscuous  ===> WORK
promiscuous---to--->Host          ===> WORK

2)HOST:-
(a)ISOLATED:- in isolated we can only talk to ourselfs

ISOLATED VLAN 10 --to--->ISOLATED VLAN 10 ===> DOESN'T WORKS
ISOLATED VLAN --to--->Promiscuous VLAN===>WORKS

(b)COMMUNITY:-in community we can talk to everyone
COMMUNITY VLAN 10 --to--->COMMUNITY VLAN 10 ===>WORKS
COMMUNITY VLAN 10 --to--->COMMUNITY VLAN 20 ===> DOESN'T WORKS
COMMUNITY VLAN --to--->Promiscuous VLAN===>WORKS


configuration:-
Primary VLAN=10

#int range f0/1-3 , f0/22 , f0/5 , f0/24 , f0/20
sw mode acc 
sw acc vlan 10

(a)configure community and isolated vlans:-
#vlan 10
     private-vlan primary
#vlan 100
     private-vlan community
#vlan 200
     private-vlan community
#vlan 500
     private-vlan isolated

vlan 10
     private-vlan association add 100,200,500

(b)configure promiscuous vlans:-
int f0/20
     sw mode private-vlan promiscous 
     sw private-vlan association mapping 10 100,200,500
     (sw private-vlan association mapping <primary vlan> <secondary vlan>)

(a)configure community and isolated vlans to its interfaces:-
int range f1/1-2
     sw mode private-vlan host
     sw private-vlan host-association 10 100 
     (sw private-vlan host-association <primary vlan> <secondary vlan>)

int range  f1/3 , f0/22
     sw mode private-vlan host
     sw private-vlan host-association 10 500
     (sw private-vlan host-association <primary vlan> <secondary vlan>)

0 Response to "Private-Vlan (PVLAN)"

Post a Comment

Powered by Blogger