hcl的private-vlan实验

拓扑如下：

SW1的配置：

[H3C-GigabitEthernet1/0/1]vlan 10
[H3C-vlan10]port g1/0/1
[H3C-vlan10]vlan 20
[H3C-vlan20]port g1/0/2
[H3C-vlan20]vlan 30
[H3C-vlan30]port g1/0/3
[H3C-vlan30]private-vlan secondary 10 20
[H3C-vlan30]int vlan 30
[H3C-Vlan-interface30]ip add 1.1.1.1 24
[H3C-vlan30]int g0/0/1
[H3C-GigabitEthernet1/0/1]port private host
[H3C-GigabitEthernet1/0/1]int g1/0/2
[H3C-GigabitEthernet1/0/2]port private host
[H3C-GigabitEthernet1/0/2]int g1/0/3
[H3C-GigabitEthernet1/0/3]port private-vlan 30 promiscuous

SW2的配置

[H3C]vlan 40
[H3C-vlan40]port g1/0/2
[H3C-vlan40]vlan 50
[H3C-vlan50]port g1/0/1
[H3C-vlan50]private-vlan primary
[H3C-vlan50]private-vlan secondary 40
[H3C-vlan50]int vlan 50
[H3C-Vlan-interface50]ip add 1.1.1.2 24
[H3C-Vlan-interface50]int g1/0/1
[H3C-GigabitEthernet1/0/1]port private-vlan 50 promiscuous 
[H3C-GigabitEthernet1/0/1]int g1/0/2
[H3C-GigabitEthernet1/0/2]port private-vlan host

在SW1的端口的各个端口查看配置，如图可以看出，配置了private-vlan，端口类型会自动变为hybrid

在SW1上查看mac地址表，如图

总结
配置private vlan的步骤
1.创建vlan，并把相应的接口以access加入到vlan中
2.在主vlan视图中，确定主vlan和建立和secondary vlan的关系
3.在接口视图下，确定端口类型为promiscuous，还是host