Private VLAN Example step 1

1
Private VLAN Example (step 1)
FA0
Internet Access
FA2
Switch 1
C
FA1
FA3
B
D
Switch 1 port FA0 is the promiscuous Interface
supporting all host ports. Clients B, C,
and F are on Isolated Ports while clients
D, E, G, and H are Connected within a
Community configuration. Routing must be
supported to allow for each host device to
access the Internet.
FA4
FA4
FA0
FA2
Switch 2
E
G
FA1
FA3
F
H
2
Private VLAN Example (step 2)
FA0
Internet Access
FA2
Switch 1
C
FA1
FA3
B
D
Switch-1configure t Switch-1(config)vtp mode
transparent Switch-1(config)vlan
101 Switch-1(config-vlan)private-vlan
isolated Switch-1(config-vlan)vlan
102 Switch-1(config-vlan)private-vlan
community Switch-1(config-vlan)vlan
100 Switch-1(config-vlan)private-vlan
primary Switch-1(config-vlan)private-vlan
association 101,102 Switch-1(config-vlan)interfac
e fastethernet 0 Switch-1(config-if)switchport
mode private-vlan promiscuous Switch-1(config-if)
switchport private-vlan mapping 100
101-102 Switch-1(config-if)interface range
fastethernet 1 - 2 Switch-1(config-if)switchport
mode private-vlan host Switch-1(config-if)switchp
ort private-vlan host-association 100
101 Switch-1(config-if)interface fastethernet
3 Switch-1(config-if)switchport mode
private-vlan host Switch-1(config-if)switchport
private-vlan host-association 100 102
FA4
FA4
FA0
FA2
Switch 2
E
G
FA1
FA3
F
H
3
Private VLAN Example (step 3)
FA0
Internet Access
FA2
Switch 1
C
FA1
FA3
Switch-2configure t Switch-2(config)vtp mode
transparent Switch-2(config-vlan)vlan
101 Switch-2(config-vlan)private-vlan
isolated Switch-2(config-vlan)vlan
102 Switch-2(config-vlan)private-vlan
community Switch-2(config-vlan)vlan
100 Switch-2(config-vlan)private-vlan
primary Switch-2(config-vlan)private-vlan
association 101-102 Switch-2(config-vlan)interfac
e fastethernet 1 Switch-2(config-if)switchport
mode private-vlan host Switch-2(config-if)switchp
ort private-vlan host-association 100
101 Switch-2(config-if)interface rang
fastethernet 1, 2 3 Switch-2(config-if)switchpo
rt mode private-vlan host Switch-2(config-if)swit
chport private-vlan host-association 100
102 Switch-2(config-if)interface fastethernet
4 Switch-2(config-if)switchport trunk encap
dot1q Switch-2(config-if)switchport mode trunk
B
D
FA4
FA4
FA0
FA2
Switch 2
E
G
FA1
FA3
F
H
4
Private VLAN Example (step 4)
FA0
Internet Access
FA2
Switch 1
C
FA1
FA3
B
D
Switch-1(config)ip routing Switch-1(config)inter
face fastethernet 4 Switch-1(config-if)swi trunk
encapsulation dot1q Switch-1(config-if)switchport
mode trunk Switch-1(config-if)interface vlan
100 Switch-1(config-if)ip add 139.100.1.9
255.255.255.0 Switch-1(config-if)private-vlan
mapping 100 101-102
FA4
FA4
FA0
FA2
Switch 2
E
G
FA1
FA3
F
H