cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
682
Views
0
Helpful
2
Replies

how Private Vlan work

misfit
Level 1
Level 1

I have a catalyst 4006, connected trought the 1/2 port with a catalyst 6509 on port 1/1.

On the 4006 I have a configured a private vlan

as following mode

>set vlan 10 pvlan-type primary

>set vlan 20 pvaln-type isolated

>set pvlan 10 20 2/1-2

>set pvlan mapping 10 20 1/2

The pvlan is designated to prevent any inteserver communication at layer 2.

But I would like to permit any communications at Layer 3 and I've configured my catalyst 6509 as following

>set vlan 10 1/1

>session 15

>set vlan 10

>int ip 172.21.1.1. 255.255.255.0

I have connected two pc on two ports the catalyst 4006 with the following ip

PC1: 172.21.1.100 255.255.255.0 gw 172.21.1.1

PC2: 172.21.1.33 255.255.255.0 gw 172.21.1.1

Trying to ping pc1 from pc2, the pc1 results unreachable.

The isolation of the private vlan is at layer 2, at layer 3 the hosts must communicate.

Why don't the hosts communicate?

are there any errors in my configuration?

can you help me?

where can i find more informations about how the private vlans work on cat 4006?

thanks in advance

2 Replies 2

p.krane
Level 3
Level 3

nspinet
Level 1
Level 1

Try the command "ip local-proxy-arp" on the

int vlan 10