WEBVTT

1
00:00.000 --> 00:01.600 align:middle line:84%


2
00:01.600 --> 00:02.110 align:middle line:84%
All right.

3
00:02.110 --> 00:02.790 align:middle line:84%
I'm excited.

4
00:02.790 --> 00:04.930 align:middle line:90%
It's time to
implement our design.

5
00:04.930 --> 00:06.580 align:middle line:90%
Based on the
previous video, we're

6
00:06.580 --> 00:09.820 align:middle line:90%
getting private VLANs, so let
me walk you through the config.

7
00:09.820 --> 00:11.590 align:middle line:90%
So here's a little
reminder of our plan

8
00:11.590 --> 00:13.240 align:middle line:90%
from our previous
video, and we're

9
00:13.240 --> 00:15.260 align:middle line:90%
going to do our
configuration and my topology

10
00:15.260 --> 00:17.433 align:middle line:84%
here on switch number 1.

11
00:17.433 --> 00:18.850 align:middle line:90%
And to make this
a little bit less

12
00:18.850 --> 00:22.120 align:middle line:90%
of a typing exercise and more
instructional and to the point,

13
00:22.120 --> 00:24.370 align:middle line:90%
let me walk you through what
we're about to implement.

14
00:24.370 --> 00:26.800 align:middle line:90%
So config t, we're all
familiar with that.

15
00:26.800 --> 00:29.300 align:middle line:90%
And on these switches, I'm
just going to blast everything,

16
00:29.300 --> 00:31.150 align:middle line:90%
just wiped out all
my existing VLANs,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

16
00:29.300 --> 00:31.150 align:middle line:90%
just wiped out all
my existing VLANs,

17
00:31.150 --> 00:33.340 align:middle line:90%
so we're starting
from scratch, and then

18
00:33.340 --> 00:36.940 align:middle line:90%
I've got these 12 interfaces
that I'm going to go ahead

19
00:36.940 --> 00:38.320 align:middle line:84%
and just set to there defaults.

20
00:38.320 --> 00:40.390 align:middle line:90%
So that way, we're
starting from scratch.

21
00:40.390 --> 00:42.540 align:middle line:90%
I'm also going to do
spanning tree mode rapid.

22
00:42.540 --> 00:44.830 align:middle line:90%
That will help me converge
just a little bit faster.

23
00:44.830 --> 00:46.455 align:middle line:90%
Now, one of the
elements we need to do,

24
00:46.455 --> 00:48.133 align:middle line:90%
if you have VTP
support for version 3,

25
00:48.133 --> 00:50.050 align:middle line:90%
I believe you can pull
that off, but if you're

26
00:50.050 --> 00:52.360 align:middle line:90%
using version 1 or
2, that doesn't work.

27
00:52.360 --> 00:55.270 align:middle line:90%
It's not compatible
with private VLANs.

28
00:55.270 --> 00:58.112 align:middle line:90%
So I'm going to specify
vtp mode transparent,

29
00:58.112 --> 00:59.820 align:middle line:90%
and then we're going
to create our VLANs.

30
00:59.820 --> 01:02.850 align:middle line:90%
In creation of these VLANs,
we have the primary VLAN,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

30
00:59.820 --> 01:02.850 align:middle line:90%
In creation of these VLANs,
we have the primary VLAN,

31
01:02.850 --> 01:05.290 align:middle line:90%
VLAN 100, and also these
secondary VLANs here,

32
01:05.290 --> 01:08.230 align:middle line:90%
but I choose to create all the
secondary ones first and then

33
01:08.230 --> 01:10.140 align:middle line:90%
follow it up with
the primary VLAN.

34
01:10.140 --> 01:12.527 align:middle line:90%
And the reason for that is
because in the primary VLAN

35
01:12.527 --> 01:14.110 align:middle line:90%
configuration, we're
going to tell it,

36
01:14.110 --> 01:16.480 align:middle line:90%
aye, you're also
going to be associated

37
01:16.480 --> 01:19.630 align:middle line:90%
with the primary VLAN with
these secondary VLANs.

38
01:19.630 --> 01:21.860 align:middle line:90%
So if they don't exist yet,
that's kind of a problem.

39
01:21.860 --> 01:24.160 align:middle line:84%
So let's create VLAN 200.

40
01:24.160 --> 01:24.980 align:middle line:84%
We'll get a name.

41
01:24.980 --> 01:27.460 align:middle line:90%
I'll call it community A.
Just when we see it in output,

42
01:27.460 --> 01:28.918 align:middle line:90%
we can recognize
it, and then we're

43
01:28.918 --> 01:30.790 align:middle line:90%
specifying the type
of private VLAN,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

43
01:28.918 --> 01:30.790 align:middle line:90%
specifying the type
of private VLAN,

44
01:30.790 --> 01:33.400 align:middle line:90%
secondary VLAN it's going
to be is a community.

45
01:33.400 --> 01:37.080 align:middle line:90%
So any ports that are associated
with VLAN 200, this community

46
01:37.080 --> 01:38.950 align:middle line:90%
VLAN, the traffic
would be allowed

47
01:38.950 --> 01:42.400 align:middle line:90%
to flow between ports
in that same community.

48
01:42.400 --> 01:44.917 align:middle line:90%
And then we would
create VLAN 300.

49
01:44.917 --> 01:47.500 align:middle line:90%
We can give it a name and then
specifying it as a private VLAN

50
01:47.500 --> 01:50.500 align:middle line:90%
type of community and any
ports that we associate

51
01:50.500 --> 01:54.100 align:middle line:90%
with that VLAN, VLAN 300,
they can talk to each other,

52
01:54.100 --> 01:56.890 align:middle line:90%
frames will be forwarded by the
switch, but what they can't do

53
01:56.890 --> 02:00.160 align:middle line:90%
is have their frames forwarded
directly between themselves
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

53
01:56.890 --> 02:00.160 align:middle line:90%
is have their frames forwarded
directly between themselves

54
02:00.160 --> 02:03.190 align:middle line:90%
in this community and ports
in a different community.

55
02:03.190 --> 02:05.200 align:middle line:84%
And then we'll create VLAN 400.

56
02:05.200 --> 02:07.450 align:middle line:90%
We'll give it a name just
for identification purposes.

57
02:07.450 --> 02:09.160 align:middle line:90%
And then for the
private VLAN type,

58
02:09.160 --> 02:11.740 align:middle line:90%
we're going to specify
that it is isolated.

59
02:11.740 --> 02:15.730 align:middle line:90%
So any ports that we associate
with VLAN 400, the isolated,

60
02:15.730 --> 02:19.150 align:middle line:90%
they will not be able to
communicate with each other

61
02:19.150 --> 02:21.940 align:middle line:90%
because they are ports
associated with the isolated

62
02:21.940 --> 02:25.030 align:middle line:90%
VLAN, and they will not be able
to communicate with other ports

63
02:25.030 --> 02:27.850 align:middle line:84%
in a different secondary VLAN.

64
02:27.850 --> 02:31.253 align:middle line:90%
So all three of these
are secondary VLANs,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

64
02:27.850 --> 02:31.253 align:middle line:90%
So all three of these
are secondary VLANs,

65
02:31.253 --> 02:32.920 align:middle line:90%
and the first two are
the type community

66
02:32.920 --> 02:34.697 align:middle line:90%
and the third one
here is isolated.

67
02:34.697 --> 02:37.030 align:middle line:90%
Now, even though they can't
talk directly to each other,

68
02:37.030 --> 02:39.610 align:middle line:90%
if we associate some port
with the primary VLAN

69
02:39.610 --> 02:41.800 align:middle line:90%
and specify it as
promiscuous, they

70
02:41.800 --> 02:44.380 align:middle line:90%
will be able to communicate with
that promiscuous port, which

71
02:44.380 --> 02:46.570 align:middle line:90%
is really important if
we want that client to be

72
02:46.570 --> 02:48.380 align:middle line:84%
able to use a default gateway.

73
02:48.380 --> 02:51.470 align:middle line:90%
And then for the primary VLAN,
which we're using VLAN 100,

74
02:51.470 --> 02:53.140 align:middle line:90%
I'm just giving it a
name here, and then

75
02:53.140 --> 02:56.170 align:middle line:90%
we're specifying private
VLAN type is primary.

76
02:56.170 --> 02:59.160 align:middle line:90%
And then we tell the primary
VLAN who it's associated with,

77
02:59.160 --> 03:01.690 align:middle line:90%
and this is a list of
the secondary VLANs
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

77
02:59.160 --> 03:01.690 align:middle line:90%
and this is a list of
the secondary VLANs

78
03:01.690 --> 03:03.280 align:middle line:90%
that we just created
just a moment ago

79
03:03.280 --> 03:05.170 align:middle line:90%
or when we configured
this, which

80
03:05.170 --> 03:07.625 align:middle line:90%
we will have created just a
few moments prior to this one.

81
03:07.625 --> 03:09.250 align:middle line:90%
So let's configure
it up to that point.

82
03:09.250 --> 03:11.590 align:middle line:90%
I'm going to right click,
copy that in my buffer,

83
03:11.590 --> 03:14.330 align:middle line:84%
and deploy that configuration.

84
03:14.330 --> 03:17.380 align:middle line:90%
So there is our secondary
VLANs, there's our primary VLAN,

85
03:17.380 --> 03:21.275 align:middle line:90%
and we've associated 200, 300,
and 400 with that primary VLAN.

86
03:21.275 --> 03:22.900 align:middle line:90%
So we've accomplished
part of our goal.

87
03:22.900 --> 03:24.310 align:middle line:84%
We've created our primary VLAN.

88
03:24.310 --> 03:27.370 align:middle line:90%
We created our secondary
VLAN, the correct types,

89
03:27.370 --> 03:30.760 align:middle line:90%
and we've also associated
these three secondary VLANs
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

89
03:27.370 --> 03:30.760 align:middle line:90%
and we've also associated
these three secondary VLANs

90
03:30.760 --> 03:32.620 align:middle line:84%
with the primary VLAN.

91
03:32.620 --> 03:36.400 align:middle line:90%
Next, let's take a look
at associating some ports

92
03:36.400 --> 03:38.320 align:middle line:90%
with each of these
secondary VLANs.

93
03:38.320 --> 03:41.410 align:middle line:90%
So we'll do a couple
of ports for VLAN 200,

94
03:41.410 --> 03:43.640 align:middle line:90%
a couple of ports for
VLAN 300, and a couple

95
03:43.640 --> 03:45.365 align:middle line:84%
of ports for VLAN 400.

96
03:45.365 --> 03:46.990 align:middle line:90%
And here's the syntax
to pull that off.

97
03:46.990 --> 03:48.310 align:middle line:90%
We're going to interface
configuration mode

98
03:48.310 --> 03:49.185 align:middle line:84%
for these two ports--

99
03:49.185 --> 03:52.120 align:middle line:90%
0/1 through 2, and we use
the command switchport

100
03:52.120 --> 03:55.090 align:middle line:90%
private-vlan
host-association, and then we

101
03:55.090 --> 03:59.190 align:middle line:90%
put the primary VLAN first,
followed by the secondary VLAN

102
03:59.190 --> 04:01.325 align:middle line:90%
we want these ports
to be associated with.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

102
03:59.190 --> 04:01.325 align:middle line:90%
we want these ports
to be associated with.

103
04:01.325 --> 04:03.700 align:middle line:90%
And then we followed up with
this command switchport mode

104
04:03.700 --> 04:05.920 align:middle line:84%
private-vlan host.

105
04:05.920 --> 04:07.450 align:middle line:90%
And boom, those
two ports are now

106
04:07.450 --> 04:11.390 align:middle line:90%
configured to be associated
with that secondary VLAN of 200.

107
04:11.390 --> 04:14.050 align:middle line:90%
Then we use the same
treatment for ports 1/1

108
04:14.050 --> 04:16.675 align:middle line:90%
through 2 except we're going
to modify that and specify

109
04:16.675 --> 04:19.060 align:middle line:90%
that they're associated
with VLAN 300, which

110
04:19.060 --> 04:21.880 align:middle line:90%
is our second secondary
community VLAN.

111
04:21.880 --> 04:24.710 align:middle line:90%
And then for ports
2/1 through 2,

112
04:24.710 --> 04:26.950 align:middle line:90%
we're putting those
in the VLAN 400, which

113
04:26.950 --> 04:28.720 align:middle line:84%
is the isolated VLAN.

114
04:28.720 --> 04:30.880 align:middle line:90%
So let's deploy that
part of our config.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

114
04:28.720 --> 04:30.880 align:middle line:90%
So let's deploy that
part of our config.

115
04:30.880 --> 04:33.308 align:middle line:84%
We'll copy that and paste it in.

116
04:33.308 --> 04:34.850 align:middle line:90%
And then before we
go, let's do this.

117
04:34.850 --> 04:36.920 align:middle line:90%
Let's create a switch
to virtual interface.

118
04:36.920 --> 04:40.090 align:middle line:90%
So the primary VLAN, we already
defined that, is VLAN 100.

119
04:40.090 --> 04:43.900 align:middle line:90%
And interface VLAN 100 is a
switched virtual interface,

120
04:43.900 --> 04:47.800 align:middle line:90%
a logical interface, a layer 3
interface that's in that VLAN.

121
04:47.800 --> 04:49.773 align:middle line:90%
So we can do a no
shut to bring it up.

122
04:49.773 --> 04:50.940 align:middle line:84%
We'll give it an IP address.

123
04:50.940 --> 04:54.250 align:middle line:90%
It's appropriate for this subnet
being used by our private VLAN

124
04:54.250 --> 04:55.660 align:middle line:84%
infrastructure.

125
04:55.660 --> 04:58.285 align:middle line:90%
And then we're going to add this
command, private-vlan mapping,

126
04:58.285 --> 04:59.827 align:middle line:90%
and then we're going
to just say Add.

127
04:59.827 --> 05:01.420 align:middle line:90%
Now, if you don't
use the keyword Add,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

127
04:59.827 --> 05:01.420 align:middle line:90%
Now, if you don't
use the keyword Add,

128
05:01.420 --> 05:03.060 align:middle line:90%
it'll just replace
what's currently there,

129
05:03.060 --> 05:04.060 align:middle line:84%
but use the keyword add.

130
05:04.060 --> 05:08.890 align:middle line:90%
It'll add these secondary VLANs
as being supported by this VLAN

131
05:08.890 --> 05:09.390 align:middle line:84%
interface.

132
05:09.390 --> 05:11.930 align:middle line:90%
So this is effectively saying,
hey, Dear Mr. Interface VLAN

133
05:11.930 --> 05:16.430 align:middle line:90%
100, please feel free to support
the traffic for the VLAN 200,

134
05:16.430 --> 05:18.700 align:middle line:90%
300, 400, which are
all secondary VLANs.

135
05:18.700 --> 05:20.860 align:middle line:90%
So even though interface
VLAN 100 is not

136
05:20.860 --> 05:23.950 align:middle line:90%
a physical interface, it
is a logical interface,

137
05:23.950 --> 05:27.580 align:middle line:90%
we want to make sure it's a
promiscuous, logical interface,

138
05:27.580 --> 05:30.620 align:middle line:90%
and this command here
allows that to happen.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

138
05:27.580 --> 05:30.620 align:middle line:90%
and this command here
allows that to happen.

139
05:30.620 --> 05:32.235 align:middle line:90%
So we'll have those
commands as well.

140
05:32.235 --> 05:34.360 align:middle line:90%
And then we have some
private VLAN mapping messages

141
05:34.360 --> 05:35.895 align:middle line:90%
indicating it took
those commands.

142
05:35.895 --> 05:36.770 align:middle line:84%
So what have we done?

143
05:36.770 --> 05:38.440 align:middle line:84%
We've created the primary VLAN.

144
05:38.440 --> 05:40.390 align:middle line:90%
We create a secondary
VLAN and they're types.

145
05:40.390 --> 05:42.250 align:middle line:90%
We associated
interfaces with those.

146
05:42.250 --> 05:44.830 align:middle line:90%
We also set up these
switched virtual interface

147
05:44.830 --> 05:46.660 align:middle line:84%
to support the secondary VLANs.

148
05:46.660 --> 05:47.440 align:middle line:84%
Now, what's next?

149
05:47.440 --> 05:51.190 align:middle line:90%
Well, we might want to do some
verification commands to make

150
05:51.190 --> 05:52.960 align:middle line:90%
sure that what we
think we configured

151
05:52.960 --> 05:54.490 align:middle line:90%
is actually
configured, and we'll

152
05:54.490 --> 05:56.530 align:middle line:90%
walk through that
verification and those steps

153
05:56.530 --> 05:57.450 align:middle line:84%
in the next video.

154
05:57.450 --> 05:59.540 align:middle line:90%
So I'll see you there
in just a moment.

155
05:59.540 --> 06:01.930 align:middle line:90%
Meanwhile, I hope this has
been informative for you,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

155
05:59.540 --> 06:01.930 align:middle line:90%
Meanwhile, I hope this has
been informative for you,

156
06:01.930 --> 06:05.160 align:middle line:90%
and I'd like to thank
you for viewing.