PVLAN experiment
Experiment 2: PVLAN
1.SW1 configuration Primary VLAN 100m isolate VLAN 101 min community VLAN 102
2.Fa0/3 is set to promiscuous port to map the primary VLAN and sub-VLAN to Fa0/3
3.Fa0/1-2 is divided into IsolateVLAN to test connectivity between R1-R3
4. Divide Fa0/1-2 into Community VLAN and test the connectivity between R1-R3
5.Fa0/1 is divided into isolate VLAN,Fa0/2 and community VLAN to test the connectivity between R1-R3.
6. Configure the same Primary VLAN 100 isolate VLAN 101 on SW2 for community VLAN 102.
Between 7.SW1-SW2, Trunk. On the basis of requirement 3, divide the Fa0/4 of SW2 into isolate VLAN, test the connectivity of inter-switch PVLAN, and divide Fa0/4 into community VLAN. Test connectivity
Configuration of R1
R1 (config) # int f0bin0
R1 (config-if) # ip add 10.10.1.1 255.255.255.0
R1 (config-if) # no sh
Configuration of R2
R2 (config) # int f0and0
R2 (config-if) # ip add 10.10.1.2 255.255.255.0
R2 (config-if) # no sh
Configuration of R3
R3 (config) # int f0Let0
R3 (config-if) # ip add 10.10.1.3 255.255.255.0
R3 (config-if) # no sh
Configuration of R4
R4 (config) # int e0Let0
R4 (config-if) # ip add 10.10.1.4 255.255.255.0
R4 (config-if) # no sh
Configuration of SW1
SW1 (config) # vlan 100
SW1 (config) # private-vlan primary
SW1 (config) # private-vlan association 101102
SW1 (config) # vlan 101
SW1 (config) # private-vlan isolated
SW1 (config) # vlan
SW1 (config) # private-vlan community
SW1 (config) # int f0bin3
SW1 (config-if) # switchport private-vlan mapping 100101-102
SW1 (config-if) # switchport mode private-vlan promiscuous
SW1#show vlan private-vlan type
# #
The third question
SW1 (config) # int range f0amp 1-2
SW1 (config-if) # switchport private-vlan host-association 100 101
SW1 (config-if) # switchport mode private-vlan host
Phenomenon:
R1#ping 10.10.1.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.1.2, timeout is 2 seconds:
.
Success rate is 0 percent (0Unip 5)
R1#ping 10.10.1.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.1.3, timeout is 2 seconds:
!
Success rate is 100 percent (5amp 5), round-trip min/avg/max = 1-2-4 ms
# #
Question 4
SW1 (config) # int range f0amp 1-2
SW1 (config-if) # switchport private-vlan host-association 100102
SW1 (config-if) # switchport mode private-vlan host
Phenomenon:
R1#ping 10.10.1.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.1.2, timeout is 2 seconds:
!
Success rate is 0 percent (0Unip 5)
R1#ping 10.10.1.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.1.3, timeout is 2 seconds:
!
Success rate is 100 percent (5amp 5), round-trip min/avg/max = 1-2-4 ms
# #
Question 5
SW1 (config) # int f0bin1
SW1 (config-if) # switchport private-vlan host-association 100 101
SW1 (config-if) # switchport mode private-vlan host
SW1 (config) # int f0bin2
SW1 (config-if) # switchport private-vlan host-association 100102
SW1 (config-if) # switchport mode private-vlan host
Phenomenon:
R1#ping 10.10.1.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.1.2, timeout is 2 seconds:
.
Success rate is 0 percent (0Unip 5)
R1#ping 10.10.1.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.1.3, timeout is 2 seconds:
!
Success rate is 100 percent (5amp 5), round-trip min/avg/max = 1-2-4 ms
R2#ping 10.10.1.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.1.3, timeout is 2 seconds:
!
Success rate is 100 percent (5amp 5), round-trip min/avg/max = 1-2-4 ms
# #
SW1 (config) # int f0bin23
SW1 (config-if) # switchport trunk encapsulation dot1q
SW1 (config-if) # switchport mode trunk
SW2 (config) # int f0bin23
SW2 (config-if) # switchport trunk encapsulation dot1q
SW2 (config-if) # switchport mode trunk
SW2 (config) # int f0amp 4
SW2 (config-if) # switchport private-vlan host-association 100 101
SW2 (config-if) # switchport mode private-vlan host
R1#ping 10.10.1.4
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.1.2, timeout is 2 seconds:
.
Success rate is 0 percent (0Unip 5)
R4#ping 10.10.1.4
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.1.3, timeout is 2 seconds:
!
Success rate is 100 percent (5amp 5), round-trip min/avg/max = 1-2-4 ms