Cisco Private VLAN 筆記

put all ports into vlan 10 (switchport access vlan 10)
vtp mode transparent
vlan 10
private-vlan primary
private-vlan association 100-101

vlan 100
private-vlan community

vlan 101
private-vlan community

interface gi0/1-gi0/10 in vlan 100
switchport mode private-vlan host
switchport private-vlan host-association 10 100

interface gi0/11-gi0/20 in vlan 101
switchport mode private-vlan host
switchport private-vlan host-association 10 101

interface gi0/48 in vlan 10
switchport mode private-vlan promiscuous
switchport private-vlan mapping 10 add 100-101

optional:
only in 3-layer switching
inter vlan 10
private-vlan mapping 100-101