Question: When I use the Cisco
3560 , 4500, I don't know how to set the port-isolate of the switch?
Answer:
1 The configuration Cisco 3560 or 2960 ws-c3560x-24p-s switch is relatively simple, enter the
network interface configuration
mode:
Switch (config) #int range f0/1 24 # operation
at the same time f0/1 to f0/24 port can be to select
the port according to their own
needs.
Switch (config-if-range) #Switchitchport protected # open
port protection
Ok... So far, achieve the purpose of each interface switch enable portprotection,.
2 The 4500 series switches do not support port protection, can be realized through PVLAN.
The main operations are as follows:
The first switch is set to Transparents, to complete the PVLAN settings.
Firstly, second Vlan 2
Switch (config) #vlan 101
Switch (config-vlan) #private-vlan community
### the establishment of vlan101 and specify the VLAN public VLAN
Switch (config) VLAN 102
Switch (config-vlan) private-vlan isolated
### the establishment of vlan102 and specify the VLAN for the isolation of VLAN
Switch (config) VLAN 200
Switch (config-vlan) private-vlan primary
Switch (config-vlan) private-vlan Association 101
Switch (config-vlan) private-vlan Association add 102
### the establishment of vlan200 and specify the VLAN VLAN, the vlan101and 102 for vlan200 second VLAN
Switch (config) #int VLAN
200
Switch (config-if) #private-vlan mapping 101102
### to enter the vlan200 configuration IP address, the second vlan101 and the 102 routing, which can make the communication
Switch (config) #int f3/1
Switch (config-if) #Switchitchport private-vlan host-association 200102
Switch (config-if) #Switchitchport private-vlan mapping 200102
Switch (config-if) #Switchitchport mode private-vlan host
### enter interface configuration mode, ws-c2960s-48td-l price the interface for PVLAN host mode,configuration of the Pvlan main VLAN and second VLAN, with 102102isolated VLAN
More information about switch and router, please view :http://cisco2960.soulcast.com
没有评论:
发表评论