ժ Ҫ ̽VLANһЩԣŲPVLANص㣬ϸPVLANò裬һʵ˵
ؼ VLAN PVLAN 
1 ǰ
ĺ豸֮һ似չǳѸ٣10Mbit/s̫100Mbit/s̫չغ10̫ͨҵеӦչԱרPVLANҲԽԽСͨʵⷽӦýܽᡣ
2 VLANľ
Ѹٷչûͨŵİȫ˸ߵҪڿ͹ƲȣҪ֤ûͨŵ԰ȫԣͳĽǸÿͻһVLANصIPͨʹVLANÿͻӵ2뿪ԷֹκζΪEthernetϢ̽ ȻַÿͻһVLANIPģ˾޴ĿչľޡЩҪ档
1VLANƣеVLANĿƣ
2ӵSTPÿVLANÿصSpanning Tree˶Ҫ
3IPַĽȱIPĻƱһЩIPַ˷ѣ
4·ɵƣÿҪӦĬصá
3 PVLAN
һµVLANƣзͬһУֻԼĬͨšһµVLANԾרVLANPrivate VLANPrivate VLANĸУ˿ͣIsolated portCommunity port, Promisc-
uous portǷֱӦͬVLANͣIsolated portIsolated PVLANCommunity portCommunity PVLANһPrivate VLANPrimary VLANǰVLANҪһͬʱPromiscuous portIsolated PVLANУIsolated portֻܺPromiscuous portͨţ˴˲ܽCommunity PVLANУCommunity portԺPromiscuous portͨţұ˴ҲԽPromiscuous port ·3㽻ӿ,յԷIsolated portCommunity portPVLANӦöڱ֤ͨŵİȫǷǳЧģûֻԼĬӣһPVLANҪVLANIPṩ˾߱2ͨŰȫԵӣеûPVLANӶʵûĬصӣPVLANڵûûκηʡPVLANܿԱ֤ͬһVLANеĸ˿໥֮䲻ͨţԴTrunk˿ڡʹͬһVLANеû໥֮Ҳܵ㲥Ӱ졣
4 PVLANò
1Put switch in VTP transparent mode
set vtp mode transparent
2 Create the primary private VLAN
set vlan vlan pvlan-type primary
3Set the isolated or community VLAN(s)
set vlan vlan pvlan-type {isolated | community}
4Map the secondary VLAN(s) to the primary VLAN
set pvlan primary_vlan {isolated_vlan | community_
vlan} {mod/port | sc0}
5Map each secondary VLAN to the primary VLAN on the promiscuous port(s)
set pvlan mapping primary_vlan {isolated_vlan | community_vlan} {mod/port} [mod/port ]
6Show PVLAN configuration
show pvlan [primary_vlan]
show pvlan mapping
show vlan [primary_vlan]
show port
5 
һеĽPVLANãοУVLAN 100Primary VLANVLAN 101Isolated VLANVLAN 102VLAN 103Community VLAN
N8-CSSW-2> (enable) show running-config
This command shows non-default configurations only.
set system name N8-CSSW-2
#vtp
set vtp domain sdunicom
set vtp mode transparent
set vlan 1 name default type ethernet mtu 1500 said 100001 state active
set vlan 100 name VLAN0100 type ethernet pvlantype primary mtu 1500 said 100100 state active
set vlan 101 name VLAN0101 type ethernet pvlantype isolated mtu 1500 said 100101 state active
set vlan 102 name VLAN0102 type ethernet pvlantype community mtu 1500 said 100102 state active
set vlan 103 name VLAN0103 type ethernet pvlantype community mtu 1500 said 100103 state active
#module 2 : 50-port 10/100/1000 Ethernet
set pvlan 100 101 2/26-29,2/35-36,2/42-43
set pvlan mapping 100 101 2/49
set pvlan 100 102 2/1-13,2/30-34
set pvlan mapping 100 102 2/49
set pvlan 100 103 2/14-25
set pvlan mapping 100 103 2/49
end
N8-CSSW-2> (enable) show pvlan
Primary Secondary Secondary-Type Ports
------- --------- ----------------
100 101 isolated 2/26-29,2/35-36,2/42-43
100 102 community 2/1-13,2/30-34
100 103 community 2/14-25
6 
Ŀǰܶ೧Ľ֧PVLANPVLANڽͨŰȫֹ㲥籩˷IPַԶ׼ģҲPVLANŻټPVLANڽϵҲԼ򵥣PVLANԽԽõԱ

