Scribd
Upload
90 views

Private VLAN Example (Step 1) : Internet Access

The document describes configuring a private VLAN network topology. It involves: 1) Configuring ports on two switches as either isolated, community, or promiscuous to separate devices. 2) Associating VLANs and ports through commands like private-vlan association and private-vlan mapping. 3) Enabling routing and assigning IP addresses to allow devices to communicate through the switches.

Uploaded by

dl_mahesh
Copyright
© Attribution Non-Commercial (BY-NC)
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PPT, PDF, TXT or read online on Scribd
90 views

Private VLAN Example (Step 1) : Internet Access

The document describes configuring a private VLAN network topology. It involves: 1) Configuring ports on two switches as either isolated, community, or promiscuous to separate devices. 2) Associating VLANs and ports through commands like private-vlan association and private-vlan mapping. 3) Enabling routing and assigning IP addresses to allow devices to communicate through the switches.

Uploaded by

dl_mahesh
Copyright
© Attribution Non-Commercial (BY-NC)
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PPT, PDF, TXT or read online on Scribd
You are on page 1/ 4

Private VLAN Example (step 1)

Internet FA0 FA2


C
Access
FA1 Switch 1 FA3
Switch 1 port FA0 is the ‘promiscuous’ B D
Interface supporting all ‘host’ ports.
FA4
Clients ‘B’, ‘C, and ‘F’ are on ‘Isolated’ FA4
Ports; while clients ‘D’, ‘E’, ‘G’, and ‘H’ are FA0 FA2
Connected within a ‘Community’ configuration. E G
FA1 Switch 2 FA3
Routing must be supported to allow for each F H
‘host’ device to access the Internet.
Private VLAN Example (step 2)
Internet FA0 FA2
C
Access
FA1 Switch 1 FA3
B D
Switch-1#configure t
Switch-1(config)#vtp mode transparent
Switch-1(config)#vlan 101 FA4
Switch-1(config-vlan)#private-vlan isolated FA4
Switch-1(config-vlan)#vlan 102 FA0 FA2
Switch-1(config-vlan)#private-vlan community E G
Switch-1(config-vlan)#vlan 100
Switch-1(config-vlan)#private-vlan primary FA1 Switch 2 FA3
Switch-1(config-vlan)#private-vlan association 101,102 F H
Switch-1(config-vlan)#interface fastethernet 0
Switch-1(config-if)#switchport mode private-vlan promiscuous
Switch-1(config-if)#switchport private-vlan mapping 100 101-102
Switch-1(config-if)#interface range fastethernet 1 - 2
Switch-1(config-if)#switchport mode private-vlan host
Switch-1(config-if)#switchport private-vlan host-association 100 101
Switch-1(config-if)#interface fastethernet 3
Switch-1(config-if)#switchport mode private-vlan host
Switch-1(config-if)#switchport private-vlan host-association 100 102
Private VLAN Example (step 3)
Internet FA0 FA2
C
Access
FA1 Switch 1 FA3
Switch-2#configure t
B D
Switch-2(config)#vtp mode transparent
Switch-2(config-vlan)#vlan 101
Switch-2(config-vlan)#private-vlan isolated FA4
Switch-2(config-vlan)#vlan 102 FA4
Switch-2(config-vlan)#private-vlan community FA0 FA2
Switch-2(config-vlan)#vlan 100 E G
Switch-2(config-vlan)#private-vlan primary
Switch-2(config-vlan)#private-vlan association 101-102 FA1 Switch 2 FA3
Switch-2(config-vlan)#interface fastethernet 1
F H
Switch-2(config-if)#switchport mode private-vlan host
Switch-2(config-if)#switchport private-vlan host-association 100 101
Switch-2(config-if)#interface rang fastethernet 0, 2 – 3
Switch-2(config-if)#switchport mode private-vlan host
Switch-2(config-if)#switchport private-vlan host-association 100 102
Switch-2(config-if)#interface fastethernet 4
Switch-2(config-if)#switchport trunk encap dot1q
Switch-2(config-if)#switchport mode trunk
Private VLAN Example (step 4)

Internet FA0 FA2


C
Access
FA1 Switch 1 FA3
B D
Switch-1(config)#ip routing
Switch-1(config)#interface fastethernet 4
Switch-1(config-if)#swi trunk encapsulation dot1q FA4
Switch-1(config-if)#switchport mode trunk FA4
Switch-1(config-if)#interface vlan 100 FA0 FA2
Switch-1(config-if)#ip add 139.100.1.9 255.255.255.0 E G
Switch-1(config-if)#private-vlan mapping 100 101-102
FA1 Switch 2 FA3
F H

You might also like