我和二等兵Vlans有个问题。我有光纤调制解调器,它们无法达到DHCP/TFTP的要求。我从私有VLAN的配置中怀疑。你能复习一下吗?我主要怀疑的是访问交换机和千兆位端口上的主干配置。
简而言之,调制解调器在打开电源时,试图通过DHCP获得IP,发送无标记帧到接入交换机4506,并且应该在vlan 11上处理,因为它们是无标记的专用vlan。在广播发现后,DHCP应该通过vlan 10转到聚合器交换机。在聚合器交换机4500 x上,有一个带有ip辅助地址的SVI vlan 10,提供服务器的地址是向他发送单播数据包。

访问交换机4506上的配置:
vlan 10
name vlan_10
private-vlan primary
!
vlan 20
name vlan_20
private-vlan primary
!
vlan 30
name vlan_30
private-vlan primary
!
! Isolated VLAN: Connects all CPE hosts to Switch
!
vlan 11
name Pvlan_11
private-vlan isolated
!
vlan 21
name Pvlan_21
private-vlan isolated
!
vlan 31
name Pvlan_31
private-vlan isolated
!
! Associating
!
vlan 10
private-vlan assoc 11
!
vlan 20
private-vlan assoc 21
!
vlan 30
private-vlan assoc 31
!
! Isolated port (Can only communicate with Primary port)
!
interface giX/Y
switchport mode private-vlan trunk promiscuous
switchport private-vlan trunk native vlan 11
switchport private-vlan trunk allowed vlan 11,21,31
switchport private-vlan mapping trunk 10 11
switchport private-vlan mapping trunk 20 21
switchport private-vlan mapping trunk 30 31发布于 2013-09-10 06:00:29
经过几次测试后,我找到了解决方案,而且正在工作。我的第一个配置是不完整的。

这里是一个工作配置:
vlan 10
name vlan_10
private-vlan primary
!
vlan 20
name vlan_20
private-vlan primary
!
vlan 30
name vlan_30
private-vlan primary
!
! Isolated VLAN: Connects all CPE hosts to Switch
!
vlan 11
name Pvlan_11
private-vlan isolated
!
vlan 21
name Pvlan_21
private-vlan isolated
!
vlan 31
name Pvlan_31
private-vlan isolated
!
! Associating
!
vlan 10
private-vlan assoc 11
!
vlan 20
private-vlan assoc 21
!
vlan 30
private-vlan assoc 31
!
! Isolated/Access port
!
interface GigabitEthernet1/1
switchport private-vlan trunk native vlan 11
switchport private-vlan trunk allowed vlan 11,21,31
switchport private-vlan association trunk 10 11
switchport private-vlan association trunk 20 21
switchport private-vlan association trunk 30 31
switchport mode private-vlan trunk secondary
!
! Promiscuous port (interconnect switchs)
!
interface TenGigabitEthernet1/1
switchport private-vlan trunk native vlan 10
switchport private-vlan mapping trunk 10 11
switchport private-vlan mapping trunk 20 21
switchport private-vlan mapping trunk 30 31
switchport mode private-vlan trunk promiscuoushttps://networkengineering.stackexchange.com/questions/2690
复制相似问题