Get the App
SLTechnology News&Howtos  ›  Network Security  › 

PVLAN experiment

Shulou Source: shulou.com Published: 2022-06-01 05:47:22 10月04日 Update

Experiment 2: PVLAN

1.SW1 configuration Primary VLAN 100m isolate VLAN 101 min community VLAN 102

2.Fa0/3 is set to promiscuous port to map the primary VLAN and sub-VLAN to Fa0/3

3.Fa0/1-2 is divided into IsolateVLAN to test connectivity between R1-R3

4. Divide Fa0/1-2 into Community VLAN and test the connectivity between R1-R3

5.Fa0/1 is divided into isolate VLAN,Fa0/2 and community VLAN to test the connectivity between R1-R3.

6. Configure the same Primary VLAN 100 isolate VLAN 101 on SW2 for community VLAN 102.

Between 7.SW1-SW2, Trunk. On the basis of requirement 3, divide the Fa0/4 of SW2 into isolate VLAN, test the connectivity of inter-switch PVLAN, and divide Fa0/4 into community VLAN. Test connectivity

Configuration of R1

R1 (config) # int f0bin0

R1 (config-if) # ip add 10.10.1.1 255.255.255.0

R1 (config-if) # no sh

Configuration of R2

R2 (config) # int f0and0

R2 (config-if) # ip add 10.10.1.2 255.255.255.0

R2 (config-if) # no sh

Configuration of R3

R3 (config) # int f0Let0

R3 (config-if) # ip add 10.10.1.3 255.255.255.0

R3 (config-if) # no sh

Configuration of R4

R4 (config) # int e0Let0

R4 (config-if) # ip add 10.10.1.4 255.255.255.0

R4 (config-if) # no sh

Configuration of SW1

SW1 (config) # vlan 100

SW1 (config) # private-vlan primary

SW1 (config) # private-vlan association 101102

SW1 (config) # vlan 101

SW1 (config) # private-vlan isolated

SW1 (config) # vlan

SW1 (config) # private-vlan community

SW1 (config) # int f0bin3

SW1 (config-if) # switchport private-vlan mapping 100101-102

SW1 (config-if) # switchport mode private-vlan promiscuous

SW1#show vlan private-vlan type

# #

The third question

SW1 (config) # int range f0amp 1-2

SW1 (config-if) # switchport private-vlan host-association 100 101

SW1 (config-if) # switchport mode private-vlan host

Phenomenon:

R1#ping 10.10.1.2

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.1.2, timeout is 2 seconds:

.

Success rate is 0 percent (0Unip 5)

R1#ping 10.10.1.3

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.1.3, timeout is 2 seconds:

!

Success rate is 100 percent (5amp 5), round-trip min/avg/max = 1-2-4 ms

# #

Question 4

SW1 (config) # int range f0amp 1-2

SW1 (config-if) # switchport private-vlan host-association 100102

SW1 (config-if) # switchport mode private-vlan host

Phenomenon:

R1#ping 10.10.1.2

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.1.2, timeout is 2 seconds:

!

Success rate is 0 percent (0Unip 5)

R1#ping 10.10.1.3

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.1.3, timeout is 2 seconds:

!

Success rate is 100 percent (5amp 5), round-trip min/avg/max = 1-2-4 ms

# #

Question 5

SW1 (config) # int f0bin1

SW1 (config-if) # switchport private-vlan host-association 100 101

SW1 (config-if) # switchport mode private-vlan host

SW1 (config) # int f0bin2

SW1 (config-if) # switchport private-vlan host-association 100102

SW1 (config-if) # switchport mode private-vlan host

Phenomenon:

R1#ping 10.10.1.2

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.1.2, timeout is 2 seconds:

.

Success rate is 0 percent (0Unip 5)

R1#ping 10.10.1.3

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.1.3, timeout is 2 seconds:

!

Success rate is 100 percent (5amp 5), round-trip min/avg/max = 1-2-4 ms

R2#ping 10.10.1.3

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.1.3, timeout is 2 seconds:

!

Success rate is 100 percent (5amp 5), round-trip min/avg/max = 1-2-4 ms

# #

SW1 (config) # int f0bin23

SW1 (config-if) # switchport trunk encapsulation dot1q

SW1 (config-if) # switchport mode trunk

SW2 (config) # int f0bin23

SW2 (config-if) # switchport trunk encapsulation dot1q

SW2 (config-if) # switchport mode trunk

SW2 (config) # int f0amp 4

SW2 (config-if) # switchport private-vlan host-association 100 101

SW2 (config-if) # switchport mode private-vlan host

R1#ping 10.10.1.4

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.1.2, timeout is 2 seconds:

.

Success rate is 0 percent (0Unip 5)

R4#ping 10.10.1.4

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.1.3, timeout is 2 seconds:

!

Success rate is 100 percent (5amp 5), round-trip min/avg/max = 1-2-4 ms

Tags: Configuration testing between phenomena experiments same basic Port requirements Apple Docker Huawei Linux macOS MariaDB Microsoft MySQL NVidia OPPO Reno macOS Redmi Shulou Tech Info Huawei OPPO Reno