private-vlan-在智能化小区中的应用.doc

目的：希望实现每个客户之间不通讯，但同时利用一个网关连接到INTERNET. 3550-emi 配置 interface FastEthernet0/1 switchport access vlan 1 switchport protected no ip address ! interface FastEthernet0/2 switchport access vlan 2 switchport protected no ip address ! interface FastEthernet0/3 switchport access vlan 2 switchport protected no ip address ! interface FastEthernet0/4 switchport access vlan 2 switchport protected no ip address ! interface FastEthernet0/5 switchport access vlan 2 switchport protected no ip address ! interface FastEthernet0/6 switchport access vlan 2 switchport protected no ip address ! interface FastEthernet0/7 switchport access vlan 2 switchport protected no ip address ! interface FastEthernet0/8 switchport access vlan 2 switchport protected no ip address ! interface FastEthernet0/9 switchport access vlan 2 switchport protected no ip address ! interface FastEthernet0/10 switchport access vlan 2 switchport protected no ip address ! interface FastEthernet0/11 switchport access vlan 2 switchport protected no ip address ! interface FastEthernet0/12 switchport access vlan 2 switchport protected no ip address ! interface FastEthernet0/13 switchport access vlan 2 switchport protected no ip address ! interface FastEthernet0/14 switchport access vlan 2 switchport protected no ip address ! interface FastEthernet0/15 switchport access vlan 2 switchport protected no ip address ! interface FastEthernet0/16 switchport access vlan 2 switchport protected no ip address ! interface FastEthernet0/17 switchport access vlan 2 switchport protected no ip address ! interface FastEthernet0/18 switchport access vlan 2 switchport protected no ip address ! interface FastEthernet0/19 switchport access vlan 2 switchport protected no ip address ! interface FastEthernet0/20 switchport access vlan 2 switchport protected no ip address ! interface FastEthernet0/21 switchport access vlan 2 switchport protected no ip address ! interface FastEthernet0/22 switchport access vlan 2 switchport protected no ip address ! interface FastEthernet0/23 switchport access vlan 2 switchport protected no ip address ! interface FastEthernet0/24 switchport access vlan 2 switchport protected no ip address ! interface GigabitEthernet0/1 switchport trunk encapsulation dot1q no ip address ! interface GigabitEthernet0/2 no ip address ! interface Vlan1 ip address shutdown ! interface Vlan2 ip address ip access-group 1 in ! interface Vlan3 ip address ip access-group 2 in ! ip route Vlan1 ! ip classless ip http server 2950G配置： interface FastEthernet0/1 switchport access vlan 3 no ip address ! interface FastEthernet0/2 switchport access vlan 3 switchport protected no ip address ! interface FastEthernet0/3 switchport access vlan 3 switchport protected no ip address ! interface FastEthernet0/4 switchport access vlan 3 switchport protected no ip address ! interface FastEthernet0/5 switchport access vlan 3 switchport protected no ip address ! interface FastEthernet0/6 switchport access vlan 3 switchport protected no ip address ! interface FastEthernet0/7 switchport access vlan 3 switchport protected no ip address ! interface FastEthernet0/8 switchport access vlan 3 switchport protected no ip address ! interface FastEthernet0/9 switchport access vlan 3 switchport protected no ip address ! interface FastEthernet0/10 switchport access vlan 3 switchport protected no ip address ! interface FastEthernet0/11 switchport access vlan 3 switchport protected no ip address ! interface FastEthernet0/12 switchport access vlan 3 switchport protected no ip address ! interface FastEthernet0/13 switchport access vlan 3 switchport protected no ip address ! interface FastEthernet0/14 switchport access vlan 3 switchport protected no ip address ! interface FastEthernet0/15 switchport access vlan 3 switchport protected no ip address ! interface FastEthernet0/16 switchport access vlan 3 switchport protected no ip address ! interface FastEthernet0/17 switchport access vlan 3 switchport protected no ip address ! interface FastEthernet0/18 switchport access vlan 3 switchport protected no ip address ! interface FastEthernet0/19 switchport access vlan 3 switchport protected no ip address ! interface FastEthernet0/20 switchport access vlan 3 switchport protected no ip address ! interface FastEthernet0/21 switchport access vlan 3 switchport protected no ip address ! interface FastEthernet0/22 switchport access vlan 3 switchport protected no ip address ! interface FastEthernet0/23 switchport access vlan 3 switchport protected no ip address ! interface FastEthernet0/24 switchport access vlan 3 switchport protected no ip address ! interface GigabitEthernet0/1 switchport trunk encapsulation dot1q no ip address ! interface GigabitEthernet0/2 no ip address ! interface Vlan1 no ip addressFW:领导，这个例子不能称之为PVLAN吧。 PVLAN的简介如下：PVLAN技术 现在有了一种新的VLAN机制，服务器同在一个子网中，但服务器只能与自己的缺省网关通信。这一新的VLAN特性就是专用VLAN(private VLAN, pVLAN)。专用VLAN是第2层的机制，在同一个2层域中有两类不同安全级别的访问端口。与服务器连接的端口称作专用端口(Private port)，一个专用端口限定在第2层，它只能发送流量到混杂端口，也只能检测从混杂端口来的流量。混杂端口(P