jump to navigation

Private-VLAN July 5, 2010

Posted by ZoeL in Cisco, Switching.
Tags:
trackback

  • 2 Cisco Switch (SW1 & SW2) connected via trunk with VTP mode set as Transparent. Our SAP engineer connect SAP server to VLAN 50 on SW1.
  • on SW2, 2 PCs (PC A & PC B) connected and assigned as vlan 50.
  • PC A & PC B are not allowed to communicate to each other. But, both of PCs allowed to access SAP Server.
  • Our client ordered us to separate PC A & PCB at layer 2 level, using Private VLAN.
  • use one additional VLAN  (VLAN 501) as VLAN Association.
  • PC A connect to SW2 port 1
    PC B connect to SW2 port 2
    SAPSvr connect to SW1 port 1

.

.

Solution

Step 1 : on SW1 & SW2, Setup Primary VLAN and Association VLAN
!
Create the additional VLAN
vlan 501
name VLAN_501
private-vlan isolated
!
!
! Set VLAN 50 as primary and set association with additional (vlan 501)
!
vlan 50
name VLAN_50
private-vlan primary
private-vlan association 501
!

Step 2 : Assign Isolated Port on SW2 for PCA & PCB
!
!
! PC A at Fastethernet0/1
!
interface fastethernet0/1
switchport mode private-vlan host
switchport private-vlan host-association 50 501
!
!
! PC B at Fastethernet0/2
!
interface fastethernet0/2
switchport mode private-vlan host
switchport private-vlan host-association 50 501
!

Step 3 : On SW1, assign Fastethernet0/1 (SAPSvr) port as Promiscuous mode.
Port with Promiscious mode able to connect Isolated port, or other promiscuous port.

!
!
! SAPSvr set as Promiscuous
!
interface fastethernet0/1
switchport mode private-vlan promiscuous
switchport private-vlan mapping 50 501
!

Comments»

1. kriswanto - July 9, 2013

Misi gan mau tanya…
Private VLAN bisa dibikin group gak ya, misalkan ada 4 pc, dari 4 pc itu di bagi jadi 2 vlan (masing2 2 pc) tapi semuanya bisa access ke 1 resource (server), mohon pencerahanya..
Tks & Regards

2. tyo - July 16, 2010

luarbiasa…

ZoeL - July 16, 2010

dicobain donk tyo, pakai yg ada di LAB tuhhh….😀

3. herry - July 14, 2010

manteppp om Izoel


Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: