组网要求:Device B上的vlan 5 和vlan 10 为primary vlan ,其上行端口g1/0/1允许vlan 5 和vlan 10 的报文携带vlan tag 通过;Device B的下行端口g1/0/2允许 Secondary vlan 2 通过,g1/0/3 允许Secondary vlan 3 通过,vlan 2 和vlan 3映射到Primary vlan 5。Device B 的下行端口g1/0/6允许Secondary vlan 6 通过,g1/0/8允许Secondary vlan 8通过, vlan 6 和vlan 8映射到 Primary vlan 10 。从Device A 看,下接的Device B只有 VLAN 5 和VLAN 10。
配置步骤如下:
1.配置DEVICE B,配置vlan 5和vlan 10 为primary vlan.
<DeviceB>sys
[DeviceB]vlan 5
[DeviceB-vlan5]private-vlan primary
[DeviceB-vlan5]quit
[DeviceB]vlan 10
[DeviceB-vlan10]private-vlan primary
[DeviceB-vlan10]quit
2.创建Secondary vlan 2、3、6、8.
[DeviceB]vlan 2 to 3
[DeviceB]vlan 6
[DeviceB-vlan6]quit
[DeviceB]vlan 8
[DeviceB-vlan8]quit
3.配置上行端口g1/0/1在vlam=n 5 和vlan 10中工作在trunk promiscuous 模式。
[DeviceB]int g1/0/1
[DeviceB-giabithethernet1/0/1]port private-vlan 5 10 tr pro
[DeviceB-giabithethernet1/0/1]quit
4.将下行端口g1/0/2加入vlan2,g1/0/3加入vlan 3,并配置他们工作在host 模式。
[DeviceB]int g1/0/2
[DeviceB-giabithethernet1/0/2]port access valn 2
[DeviceB-giabithethernet1/0/2]port private-valn host
[DeviceB-giabithethernet1/0/2]quit
[DeviceB]int g1/0/3
[DeviceB-giabithethernet1/0/3]port access valn 3
[DeviceB-giabithethernet1/0/3]port private-valn host
[DeviceB-giabithethernet1/0/3]quit
5.配置Primary vlan 5 和secondary vlan 2、3间的映射关系。
[DeviceB]vlan 5
[DeviceB-vlan5]private-vlan secondary 2 to 3
[DeviceB-vlan5]quit
-
将下行端口g1/0/6加入vlan6,g1/0/8加入vlan 8,并配置他们工作在host 模式。
[DeviceB]int g1/0/6
[DeviceB-giabithethernet1/0/6]port access valn 6
[DeviceB-giabithethernet1/0/6]port private-valn host
[DeviceB-giabithethernet1/0/6]quit
[DeviceB]int g1/0/8
[DeviceB-giabithethernet1/0/8]port access valn 8
[DeviceB-giabithethernet1/0/8]port private-valn host
[DeviceB-giabithethernet1/0/8]quit - 配置Primary vlan 10和secondary vlan 6、8间的映射关系。
[DeviceB]vlan 10
[DeviceB-vlan10]private-vlan secondary 6 to 8
[DeviceB-vlan10]quit
8.配置Device A 。创建VLAN 5和 VLAN 10.
[DeviceB]vlan 5
[DeviceB-vlan5]quit
[DeviceB]vlan 10
[DeviceB-vlan10]quit
- 配置端口g1/0/1为Hybrid端口,并允许 VLAN 5和 VLAN 10携带 Tag通过.
[DeviceB]int g1/0/1
[DeviceB-giabithethernet1/0/1]port link-type hybrid
[DeviceB-giabithethernet1/0/1]port hybrid valn 5 10 tagged
[DeviceB-giabithethernet1/0/1]quit
10.显示与验证。
转载于:https://blog.51cto.com/14221438/2368328