PVLAN实验

创新互联拥有网站维护技术和项目管理团队，建立的售前、实施和售后服务体系，为客户提供定制化的网站设计、成都做网站、网站维护、联通机房服务器托管解决方案。为客户网站安全和日常运维提供整体管家式外包优质服务。我们的网站维护服务覆盖集团企业、上市公司、外企网站、电子商务商城网站建设、政府网站等各类型客户群体，为全球数千家企业提供全方位网站维护、服务器维护解决方案。

实验二：PVLAN

1.SW1配置Primary VLAN 100，Isolate VLAN 101，Community VLAN 102

2.Fa0/3设置成promiscuous端口，把主VLAN和子VLAN映射到Fa0/3;

3.Fa0/1-2划分到IsolateVLAN，测试R1-R3之间的连通性；

4.把Fa0/1-2划分到Community VLAN,测试R1-R3之间的连通性；

5.Fa0/1划分到isolate VLAN,Fa0/2划分到community VLAN,测试R1-R3之间的连通性.

6.在SW2上配置相同的Primary VLAN 100，Isolate VLAN 101，Community VLAN 102.

7.SW1-SW2之间起Trunk.在需求3的基础上,把SW2的Fa0/4划分到isolate VLAN,测试inter-switch PVLAN的连通性;Fa0/4划分到community VLAN.测试连通性

R1的配置

R1(config)#int f0/0

R1(config-if)#ip add 10.10.1.1 255.255.255.0

R1(config-if)#no sh

R2的配置

R2(config)#int f0/0

R2(config-if)#ip add 10.10.1.2 255.255.255.0

R2(config-if)#no sh

R3的配置

R3(config)#int f0/0

R3(config-if)#ip add 10.10.1.3 255.255.255.0

R3(config-if)#no sh

R4的配置

R4(config)#int e0/0

R4(config-if)#ip add 10.10.1.4 255.255.255.0

R4(config-if)#no sh

SW1的配置

SW1(config)# vlan 100

SW1(config)# private-vlan primary 

SW1(config)# private-vlan association 101,102

SW1(config)# vlan 101

SW1(config)# private-vlan isolated 

SW1(config)# vlan 102

SW1(config)# private-vlan community 

SW1(config)#int  f0/3

SW1(config-if)#switchport private-vlan mapping 100 101-102

SW1(config-if)#switchport mode private-vlan promiscuous

SW1#show vlan private-vlan type

#########################################

第三题

SW1(config)#int range f0/1 - 2

SW1(config-if)#switchport private-vlan host-association 100 101

SW1(config-if)#switchport mode private-vlan host

现象：

R1#ping 10.10.1.2

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.1.2, timeout is 2 seconds:

.....

Success rate is 0 percent (0/5)

R1#ping 10.10.1.3

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.1.3, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms

#########################################

第四题

SW1(config)#int range f0/1 - 2

SW1(config-if)#switchport private-vlan host-association 100 102

SW1(config-if)#switchport mode private-vlan host

现象：

R1#ping 10.10.1.2

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.1.2, timeout is 2 seconds:

!!!!!

Success rate is 0 percent (0/5)

R1#ping 10.10.1.3

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.1.3, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms

#########################################

第五题

SW1(config)#int  f0/1 

SW1(config-if)#switchport private-vlan host-association 100 101

SW1(config-if)#switchport mode private-vlan host

SW1(config)#int f0/2

SW1(config-if)#switchport private-vlan host-association 100 102

SW1(config-if)#switchport mode private-vlan host

现象：

R1#ping 10.10.1.2

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.1.2, timeout is 2 seconds:

.....

Success rate is 0 percent (0/5)

R1#ping 10.10.1.3

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.1.3, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms

R2#ping 10.10.1.3

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.1.3, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms

#########################################

SW1(config)#int  f0/23 

SW1(config-if)#switchport trunk encapsulation dot1q

SW1(config-if)#switchport mode trunk

SW2(config)#int  f0/23 

SW2(config-if)#switchport trunk encapsulation dot1q

SW2(config-if)#switchport mode trunk

SW2(config)#int  f0/4 

SW2(config-if)#switchport private-vlan host-association 100 101

SW2(config-if)#switchport mode private-vlan host

R1#ping 10.10.1.4

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.1.2, timeout is 2 seconds:

.....

Success rate is 0 percent (0/5)

R4#ping 10.10.1.4

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.1.3, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms