※DSW3_3560を下位L2SW想定として使用


■プライベートVLAN設定におけるポイント
    ⇒VTPはtransparent modeに設定する(L2SWならびに上位L3SW)
    ⇒上位L3SWのSVIはプライマリVLANのみを設定(隔離VLANとコミュニティVLANのSVIは設定しない。)


■DSW3_3560投入コンフィグ
conf t
!
vtp mode transparent
!
vlan 100
private-vlan primary
exit
!
vlan 10
private-vlan isolated
exit
!
vlan 20
private-vlan community
exit
!
vlan 100
private-vlan association 10,20
exit
!
int gi0/1
switchport mode private-vlan promiscuous
switchport private-vlan mapping 100 10,20
no shut
exit
!
int range fa0/1 - 2
switchport mode private-vlan host
switchport private-vlan host-association 100 10
no shut
exit
!
int range fa0/3 - 4
switchport mode private-vlan host
switchport private-vlan host-association 100 20
no shut
exit
!
end


■DSW1_3750投入コンフィグ
conf t
!
ip routing
!
vtp mode transparent
!
vlan 100
!
int gi1/0/1
switchport mode access
switchport access vlan 100
no shut
!
int fa1/0/1
no switchport
ip address 10.0.0.1 255.255.255.0
no shut
!
int vlan 100
private-vlan mapping add 10,20
ip address 172.16.100.1 255.255.255.0
no shut
!
router eigrp 100
network 172.16.100.0 0.0.0.255
network 10.0.0.0 0.0.0.255
!
end


DSW3_3560#sh vlan private-vlan

Primary Secondary Type Ports

              • --------- ----------------- ------------------------------------------

100 10 isolated Fa0/1, Fa0/2, Gi0/1
100 20 community Fa0/3, Fa0/4, Gi0/1