Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

PVLAN experiment

2025-02-27 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Network Security >

Share

Shulou(Shulou.com)06/01 Report--

Experiment 2: PVLAN

1.SW1 configuration Primary VLAN 100m isolate VLAN 101 min community VLAN 102

2.Fa0/3 is set to promiscuous port to map the primary VLAN and sub-VLAN to Fa0/3

3.Fa0/1-2 is divided into IsolateVLAN to test connectivity between R1-R3

4. Divide Fa0/1-2 into Community VLAN and test the connectivity between R1-R3

5.Fa0/1 is divided into isolate VLAN,Fa0/2 and community VLAN to test the connectivity between R1-R3.

6. Configure the same Primary VLAN 100 isolate VLAN 101 on SW2 for community VLAN 102.

Between 7.SW1-SW2, Trunk. On the basis of requirement 3, divide the Fa0/4 of SW2 into isolate VLAN, test the connectivity of inter-switch PVLAN, and divide Fa0/4 into community VLAN. Test connectivity

Configuration of R1

R1 (config) # int f0bin0

R1 (config-if) # ip add 10.10.1.1 255.255.255.0

R1 (config-if) # no sh

Configuration of R2

R2 (config) # int f0and0

R2 (config-if) # ip add 10.10.1.2 255.255.255.0

R2 (config-if) # no sh

Configuration of R3

R3 (config) # int f0Let0

R3 (config-if) # ip add 10.10.1.3 255.255.255.0

R3 (config-if) # no sh

Configuration of R4

R4 (config) # int e0Let0

R4 (config-if) # ip add 10.10.1.4 255.255.255.0

R4 (config-if) # no sh

Configuration of SW1

SW1 (config) # vlan 100

SW1 (config) # private-vlan primary

SW1 (config) # private-vlan association 101102

SW1 (config) # vlan 101

SW1 (config) # private-vlan isolated

SW1 (config) # vlan

SW1 (config) # private-vlan community

SW1 (config) # int f0bin3

SW1 (config-if) # switchport private-vlan mapping 100101-102

SW1 (config-if) # switchport mode private-vlan promiscuous

SW1#show vlan private-vlan type

# #

The third question

SW1 (config) # int range f0amp 1-2

SW1 (config-if) # switchport private-vlan host-association 100 101

SW1 (config-if) # switchport mode private-vlan host

Phenomenon:

R1#ping 10.10.1.2

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.1.2, timeout is 2 seconds:

.

Success rate is 0 percent (0Unip 5)

R1#ping 10.10.1.3

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.1.3, timeout is 2 seconds:

!

Success rate is 100 percent (5amp 5), round-trip min/avg/max = 1-2-4 ms

# #

Question 4

SW1 (config) # int range f0amp 1-2

SW1 (config-if) # switchport private-vlan host-association 100102

SW1 (config-if) # switchport mode private-vlan host

Phenomenon:

R1#ping 10.10.1.2

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.1.2, timeout is 2 seconds:

!

Success rate is 0 percent (0Unip 5)

R1#ping 10.10.1.3

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.1.3, timeout is 2 seconds:

!

Success rate is 100 percent (5amp 5), round-trip min/avg/max = 1-2-4 ms

# #

Question 5

SW1 (config) # int f0bin1

SW1 (config-if) # switchport private-vlan host-association 100 101

SW1 (config-if) # switchport mode private-vlan host

SW1 (config) # int f0bin2

SW1 (config-if) # switchport private-vlan host-association 100102

SW1 (config-if) # switchport mode private-vlan host

Phenomenon:

R1#ping 10.10.1.2

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.1.2, timeout is 2 seconds:

.

Success rate is 0 percent (0Unip 5)

R1#ping 10.10.1.3

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.1.3, timeout is 2 seconds:

!

Success rate is 100 percent (5amp 5), round-trip min/avg/max = 1-2-4 ms

R2#ping 10.10.1.3

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.1.3, timeout is 2 seconds:

!

Success rate is 100 percent (5amp 5), round-trip min/avg/max = 1-2-4 ms

# #

SW1 (config) # int f0bin23

SW1 (config-if) # switchport trunk encapsulation dot1q

SW1 (config-if) # switchport mode trunk

SW2 (config) # int f0bin23

SW2 (config-if) # switchport trunk encapsulation dot1q

SW2 (config-if) # switchport mode trunk

SW2 (config) # int f0amp 4

SW2 (config-if) # switchport private-vlan host-association 100 101

SW2 (config-if) # switchport mode private-vlan host

R1#ping 10.10.1.4

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.1.2, timeout is 2 seconds:

.

Success rate is 0 percent (0Unip 5)

R4#ping 10.10.1.4

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.1.3, timeout is 2 seconds:

!

Success rate is 100 percent (5amp 5), round-trip min/avg/max = 1-2-4 ms

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 0

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Network Security

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report