1.6 Private-VLAN

  • Private-VLAN must be transparent mode


Three type of VLANs
primary VLAN
+ community
+ isolated

Three type of ports
+ promiscous port ->assign to primary VLAN ok to promiscous/isolated/community
+ isolated port -> can communicate with promiscous port
+ community port -> can communicate with promiscous and same community port.


SW1(config)#vlan 28
SW1(config-vlan)#name VLAN_28
SW1(config-vlan)#private-vlan primary
SW1(config-vlan)#private-vlan association 281
SW1(config-if)#switchport private-vlan host-association 28 281
SW1(config-if)#switchport mode private-vlan host

SW1#sh int fa 0/7 switchport
Name: Fa0/7
Switchport: Enabled
Administrative Mode: private-vlan host
Operational Mode: down
Administrative Trunking Encapsulation: negotiate
Negotiation of Trunking: Off
Access Mode VLAN: 28 (primary)
Trunking Native Mode VLAN: 1 (default)
Administrative Native VLAN tagging: enabled
Voice VLAN: none
Administrative private-vlan host-association: 28 (VLAN_28) 281 (VLAN0281)
Administrative private-vlan mapping: none
Administrative private-vlan trunk native VLAN: none
Administrative private-vlan trunk Native VLAN tagging: enabled
Administrative private-vlan trunk encapsulation: dot1q
Administrative private-vlan trunk normal VLANs: none
Administrative private-vlan trunk private VLANs: none
Operational private-vlan: none
Trunking VLANs Enabled: ALL
Pruning VLANs Enabled: 2-1001
Capture Mode Disabled
Capture VLANs Allowed: ALL

Protected: false
Unknown unicast blocked: disabled
Unknown multicast blocked: disabled
Appliance trust: none
Rack3SW1#

3.1 OSPF
network type
- Broadcast
- Non Broadcast
- Point-to-Point
- Point-to-Multipoint
- Point-to-Point Non Broadcast
- Loopback

Frame-relay - Non Broadcat need "neighbor" command to establish peer.

3.2 Ethernet OSPF
- change network to Non Broadcat
- neighbor command must be applied to one port.


ip ospf dead-interval minimal hello-multiplier 3


6. QoS Frame-Relay
Bc = CIR * Tc/1000
Be = (AL-CIR) * Tc/1000