基于vlan的

PVLAN 隔离vlan


先给大家介绍一下通讯规则：
1、隔离vlan和社团vlan不能通讯
2、隔离vlan内PC间不能互访
3、社团vlan内PC间可以互访
4、所有PC均可同主vlan下设备互访
SW:
vlan 2 创建vlan 2
private-vlan primary vlan2为主vlan
vlan 202
private-vlan isolated 隔离vlan
vlan 203
private-vlan community 社团vlan
interface Vlan2 创建虚拟地址
ip address 192.168.1.1 255.255.255.0
ip dhcp pool 2 建立地址池
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 8.8.8.8
interface f0/1 主vlan所在接口
switchport access vlan 2
switchport mode private-vlan promiscuous
switchport private-vlan mapping 2 202-203
interface range f0/2-3 隔离vlan
switchport access vlan 2
switchport mode private-vlan host
switchport private-vlan host-association 2 203
interface range f0/4-5 社团vlan
switchport mode private-vlan host
switchport private-vlan host-association 2 203