WEBVTT

1
00:00.000 --> 00:00.990 align:middle line:84%


2
00:00.990 --> 00:03.670 align:middle line:90%
The carpenter's role is
to measure twice and then

3
00:03.670 --> 00:05.500 align:middle line:90%
cut once, and that's
what I like to do

4
00:05.500 --> 00:07.780 align:middle line:84%
as we implement private VLANs.

5
00:07.780 --> 00:09.010 align:middle line:84%
So let's take a moment.

6
00:09.010 --> 00:11.470 align:middle line:90%
We'll consider our design
of what VLAN numbers

7
00:11.470 --> 00:14.050 align:middle line:90%
we're going to use
for the primary VLAN

8
00:14.050 --> 00:15.430 align:middle line:90%
and also for the
secondary VLANs,

9
00:15.430 --> 00:17.740 align:middle line:90%
also what type of
secondary VLANs

10
00:17.740 --> 00:19.853 align:middle line:90%
are we going to use,
community or isolated.

11
00:19.853 --> 00:21.520 align:middle line:90%
We'll have that all
planned out and then

12
00:21.520 --> 00:23.710 align:middle line:90%
we'll follow that up
in the subsequent video

13
00:23.710 --> 00:26.410 align:middle line:90%
with the actual implementation
and then verification

14
00:26.410 --> 00:29.600 align:middle line:90%
that the private VLAN
is working as expected.

15
00:29.600 --> 00:32.362 align:middle line:90%
So let's go to the drawing board
and let's put a plan together.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

15
00:29.600 --> 00:32.362 align:middle line:90%
So let's go to the drawing board
and let's put a plan together.

16
00:32.362 --> 00:33.820 align:middle line:90%
All right, and for
our plan, here's

17
00:33.820 --> 00:35.862 align:middle line:90%
what I propose because I
already have it up here.

18
00:35.862 --> 00:39.340 align:middle line:90%
So let's use VLAN 100
as the primary VLAN.

19
00:39.340 --> 00:42.010 align:middle line:90%
For the IP address base,
let's use 10.100.0,

20
00:42.010 --> 00:45.760 align:middle line:90%
and we can also configure DHCP
services just to hand out IP

21
00:45.760 --> 00:47.620 align:middle line:90%
addresses to clients
if we wanted to.

22
00:47.620 --> 00:50.010 align:middle line:90%
As far as the secondary
VLANs, let's create

23
00:50.010 --> 00:52.480 align:middle line:84%
VLAN 200 as a secondary VLAN.

24
00:52.480 --> 00:55.480 align:middle line:90%
We'll specify it as
a type of community.

25
00:55.480 --> 00:58.150 align:middle line:90%
We'll create VLAN 300
as a secondary VLAN.

26
00:58.150 --> 01:00.650 align:middle line:90%
We'll specify it as a
type of community as well.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

26
00:58.150 --> 01:00.650 align:middle line:90%
We'll specify it as a
type of community as well.

27
01:00.650 --> 01:04.680 align:middle line:90%
And then for VLAN 400, let's
specify that as isolated.

28
01:04.680 --> 01:07.570 align:middle line:90%
And then we can also test to
verify the traffic patterns

29
01:07.570 --> 01:10.450 align:middle line:90%
that are allowed or not allowed
based on these secondary VLANs

30
01:10.450 --> 01:11.970 align:middle line:84%
that ports are associated with.

31
01:11.970 --> 01:15.040 align:middle line:90%
Now as far as the ports go,
let's also plan on some ports.

32
01:15.040 --> 01:19.640 align:middle line:90%
Let's put port
0/1-2 in VLAN 200.

33
01:19.640 --> 01:24.880 align:middle line:90%
Let's use ports
1/1-2 in VLAN 300,

34
01:24.880 --> 01:29.610 align:middle line:90%
and then let's use
ports 2/1-2 in VLAN 400.

35
01:29.610 --> 01:31.450 align:middle line:90%
And that way, we can
verify by connecting
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

35
01:29.610 --> 01:31.450 align:middle line:90%
And that way, we can
verify by connecting

36
01:31.450 --> 01:34.660 align:middle line:90%
devices, PCs, to those ports,
and verifying what works

37
01:34.660 --> 01:35.650 align:middle line:84%
and what doesn't work.

38
01:35.650 --> 01:36.733 align:middle line:84%
And here's what we expect.

39
01:36.733 --> 01:39.642 align:middle line:90%
If we had two
devices, 0/1 and 2,

40
01:39.642 --> 01:41.350 align:middle line:90%
they should be able
to talk to each other

41
01:41.350 --> 01:44.920 align:middle line:90%
but they should not be able
to communicate with ports 1/1

42
01:44.920 --> 01:46.240 align:middle line:84%
or 1/2.

43
01:46.240 --> 01:48.550 align:middle line:90%
And regarding the
two devices here,

44
01:48.550 --> 01:50.890 align:middle line:90%
we would expect that those
devices can communicate

45
01:50.890 --> 01:55.360 align:middle line:90%
with each other but not with
devices off of port 0/1 and 2.

46
01:55.360 --> 01:57.610 align:middle line:90%
And then for the isolated
VLAN, these poor ports here,

47
01:57.610 --> 01:59.710 align:middle line:84%
we'll use 2/1-2.

48
01:59.710 --> 02:02.200 align:middle line:90%
Any devices we connect here
should not be able to talk
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

48
01:59.710 --> 02:02.200 align:middle line:90%
Any devices we connect here
should not be able to talk

49
02:02.200 --> 02:05.470 align:middle line:90%
to each other, nor should they
be able to talk to any devices

50
02:05.470 --> 02:09.490 align:middle line:90%
in VLAN 300 or 200 as
part of our private VLAN,

51
02:09.490 --> 02:11.950 align:middle line:90%
even though they are all
going to have an IP address

52
02:11.950 --> 02:14.300 align:middle line:84%
on the 10.100.0 network.

53
02:14.300 --> 02:15.730 align:middle line:90%
The key is here
the switch, based

54
02:15.730 --> 02:17.950 align:middle line:90%
on the configuration
with the private VLANs,

55
02:17.950 --> 02:20.170 align:middle line:90%
is controlling what
traffic is allowed

56
02:20.170 --> 02:22.570 align:middle line:90%
back and forth between
the various ports based

57
02:22.570 --> 02:23.810 align:middle line:84%
on the configuration.

58
02:23.810 --> 02:26.320 align:middle line:90%
So with that plan in
mind, let me walk you

59
02:26.320 --> 02:28.870 align:middle line:90%
through in the next video
the exact configuration

60
02:28.870 --> 02:31.390 align:middle line:90%
to implement this
step by step, and then
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

60
02:28.870 --> 02:31.390 align:middle line:90%
to implement this
step by step, and then

61
02:31.390 --> 02:32.860 align:middle line:90%
once we have it
configured, we'll

62
02:32.860 --> 02:34.930 align:middle line:90%
put some devices on
those ports, and then

63
02:34.930 --> 02:36.888 align:middle line:90%
we'll verify the results
in a subsequent video.

64
02:36.888 --> 02:39.180 align:middle line:90%
So I look forward to seeing
you in the next video where

65
02:39.180 --> 02:41.060 align:middle line:90%
we start a configuration
in just a moment.

66
02:41.060 --> 02:43.570 align:middle line:90%
Meanwhile, I hope this has
been informative for you

67
02:43.570 --> 02:46.800 align:middle line:90%
and I'd like to thank
you for viewing.