PVLAN实验
实验二：PVLAN
1.SW1配置Primary VLAN 100，Isolate VLAN 101，Community VLAN 102
2.Fa0/3设置成promiscuous端口，把主VLAN和子VLAN映射到Fa0/3;
3.Fa0/1-2划分到IsolateVLAN，测试R1-R3之间的连通性；
4.把Fa0/1-2划分到Community VLAN,测试R1-R3之间的连通性；
5.Fa0/1划分到isolate VLAN,Fa0/2划分到community VLAN,测试R1-R3之间的连通性.
6.在SW2上配置相同的Primary VLAN 100，Isolate VLAN 101，Community VLAN 102.
7.SW1-SW2之间起Trunk.在需求3的基础上,把SW2的Fa0/4划分到isolate VLAN,测试inter-switch PVLAN的连通性;Fa0/4划分到community VLAN.测试连通性
R1的配置
R1(config)#int f0/0
R1(config-if)#ip add 10.10.1.1 255.255.255.0
R1(config-if)#no sh
R2的配置
R2(config)#int f0/0
R2(config-if)#ip add 10.10.1.2 255.255.255.0
R2(config-if)#no sh
R3的配置
R3(config)#int f0/0
R3(config-if)#ip add 10.10.1.3 255.255.255.0
R3(config-if)#no sh
R4的配置
R4(config)#int e0/0
R4(config-if)#ip add 10.10.1.4 255.255.255.0
R4(config-if)#no sh
SW1的配置
SW1(config)# vlan 100
SW1(config)# private-vlan primary
SW1(config)# private-vlan association 101,102
SW1(config)# vlan 101
SW1(config)# private-vlan isolated
SW1(config)# vlan 102
SW1(config)# private-vlan community
SW1(config)#int f0/3
SW1(config-if)#switchport private-vlan mapping 100 101-102
SW1(config-if)#switchport mode private-vlan promiscuous
SW1#show vlan private-vlan type
#########################################
第三题
SW1(config)#int range f0/1 - 2
SW1(config-if)#switchport private-vlan host-association 100 101
SW1(config-if)#switchport mode private-vlan host
现象：
R1#ping 10.10.1.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.1.2, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
R1#ping 10.10.1.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.1.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
#########################################
第四题
SW1(config)#int range f0/1 - 2
SW1(config-if)#switchport private-vlan host-association 100 102
SW1(config-if)#switchport mode private-vlan host
现象：
R1#ping 10.10.1.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.1.2, timeout is 2 seconds:
!!!!!
Success rate is 0 percent (0/5)
R1#ping 10.10.1.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.1.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
#########################################
第五题
SW1(config)#int f0/1
SW1(config-if)#switchport private-vlan host-association 100 101
SW1(config-if)#switchport mode private-vlan host
SW1(config)#int f0/2
SW1(config-if)#switchport private-vlan host-association 100 102
SW1(config-if)#switchport mode private-vlan host
现象：
R1#ping 10.10.1.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.1.2, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
R1#ping 10.10.1.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.1.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
R2#ping 10.10.1.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.1.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
#########################################
SW1(config)#int f0/23
SW1(config-if)#switchport trunk encapsulation dot1q
SW1(config-if)#switchport mode trunk
SW2(config)#int f0/23
SW2(config-if)#switchport trunk encapsulation dot1q
SW2(config-if)#switchport mode trunk
SW2(config)#int f0/4
SW2(config-if)#switchport private-vlan host-association 100 101
SW2(config-if)#switchport mode private-vlan host
R1#ping 10.10.1.4
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.1.2, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
R4#ping 10.10.1.4
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.1.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
