primary private-vlan association 101,102 interface Vlan100 ip address 192.168.1.1 255.255.255.0 private-vlan mapping 101,102 三、Private VLAN 高级应用 3.1 组件构成 Primary VLAN:核心通信通道 Community VLAN:组内互通 Isolated VLAN:完全隔离 3.2 配置要点对比 特性 思科 华为 华三 锐捷 主VLAN创建 private-vlan primary port-isolate mode all port-isolate enable port-group isolate 端口关联 switchport private-vlan host port-isolate enable port-isolate uplink-port port-group member 上行链路配置 switchport private-vlan promiscuous port-isolate uplink-port
Access Mode VLAN: 1 (default) Trunking Native Mode VLAN: 1 (default) Voice VLAN: none Administrative private-vlan host-association: none Administrative private-vlan mapping: none Administrative private-vlan trunk native VLAN: none Administrative private-vlan trunk encapsulation: dot1q Administrative private-vlan trunk normal VLANs: none Administrative private-vlan trunk private VLANs: none Operational private-vlan: none
Native Mode VLAN: 1 (default)Administrative Native VLAN tagging: enabledVoice VLAN: noneAdministrative private-vlan host-association: none Administrative private-vlan mapping: none Administrative private-vlan trunk native VLAN: noneAdministrative private-vlan trunk Native VLAN tagging: enabledAdministrative private-vlan trunk encapsulation: dot1qAdministrative private-vlan trunk normal VLANs: noneAdministrative private-vlan trunk associations: noneAdministrative private-vlan trunk mappings: noneOperational private-vlan: noneTrunking
Private VLAN配置 设置 VLAN 类型为Primary [switch-vlan10]private-vlan primary 建立 Primary VLAN 和 Secondary VLAN 间映射关系 [switch-vlan10]private-vlan secondary 2 3 配置完成后,SWB与PCA和PCB可以互通,但PCA与PCB之间不能互通。