This blog was originally started to better help me understand the technologies in the CCIE R&S blueprint; after completing the R&S track I have decided to transition the blog into a technology blog.

CCIE #29033

This blog will continue to include questions, troubleshooting scenarios, and references to existing and new technologies but will grow to include a variety of different platforms and technologies. Currently I have created over 185 questions/answers in regards to the CCIE R&S track!! Note: answers are in the comment field or within "Read More" section.

You can also follow me on twitter @FE80CC1E


Sunday, April 25, 2010

Question 31

Can you provide a configuration example leveraging Private VLANs?
You must use all types.




1 comments:

Packets Analyzed said...

Create the vlans and define them as either primary, secondary isolated or secondary community. Then associate the secondaries with the primary VLAN

Primary - Communicates with all VLANs (promiscuous)
Isolated - Only communicates with the Primary VLAN. Cannot communicate with other isolated hosts.
Community - Communicates with the Primary and other hosts that are part of the same community VLAN.

Diagram has been included in the post

vlan 200
private-vlan primary
private-vlan association add 300,400,500,600
vlan 300
private-vlan isolated
vlan 400
pivate-vlan community
vlan 500
pivate-vlan community
vlan 600
pivate-vlan community

Then assign the the ports as either a promiscous (primary) or host (community/isolated) and associate the primary and secondary VLANs

inter range fas 0/1 - 3
switchport mode private-vlan host
switchport private-vlan host-association 200 300
inter range fas 0/4 - 5
switchport mode private-vlan host
switchport private-vlan host-association 200 400
inter range fas 0/6 - 7
switchport mode private-vlan host
switchport private-vlan host-association 200 500
inter range fas 0/8 - 10
switchport mode private-vlan host
switchport private-vlan host-association 200 600
interface range fas 0/20 - 23
switchport mode private-vlan promiscous
switchport private-vlan mapping 200 add 300,400,500,600

Post a Comment