PVLAN Configuration on 2 Switches
Hello,
I'm trying to configure PVLAN on 2 switches including Virtual Distributed Switch.
My 2 switches are:
A: vDS (PVLAN Supported)
C: CISCO 4506 (PVLAN Supported)
[You can see the figure attached]
Could you please help me implementing this configuration!
Any Documentation, suggestion, help, advice...
I'll be grateful if you could help.
I'm trying to find a step by step procedure which could guide me.
This is the first time that I work on VMware and I'm not experienced with PVLANs.
Somme of the issues are :
- How to configure PVLAN on vDS. Which port to set as promiscuous or trunk ...?
- How to configure ports on the CISCO Switch (port C1 and port C2 in the figure) ?
Thanks in advance
Configuration
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Thank you Otto,
In fact the effective PVLAN configuration will be made on the virtual Distributed Switch side.
What I want to do is accessing the Virtual Machines (isolated hosts) from the CISCO Switch (port C2).
How should I configure the port C2 of CISCO Switch?
And how should I configure the ports linking the CISCO Switch to the vDS (A1 and C1)? Should I use simple trunking?
If I understand your question correctly, you only want to isolate the VM's from each other, but not multiple VS's (or VM's on the multiple VS's) from each other?
The nice thing about PVLANs is that it is completely transparent to any other switch. If you config port A1 as promiscuous, and have the VM's connected to isolated ports, you do not need to bother with PVLANs on the 4500. Port C1 can then be an access (no-trunk) port.
But the longer I dwell on it, the more I think you would like to make the 4500 a distribution switch, and expand the isolated VLAN (i.e. one IP subnet) over multiple VS's. In this case, you need to configure the PVLANs (the first couple of lines from the config) on the 4500. Then you only need to config C1 (and A1 on the VS) as a trunk port ("switchport mode trunk"), and you're done. If C2 is connected to the default gateway of the subnet (like a router or firewall), that should be a promiscuous port.
So, to summarise (I do tend to digress easily): If you only want the PVLAN scope on the single VS, C1 should be simple access port, and A1 an PVLAN promiscuous port. If you want the PVLAN scope to span multiple VS's connected to the 4500, C1 and A1 is standard trunk ports with no PVLAN settings.
Business Accounts
Answer for Membership
by: Otto_NPosted on 2009-09-18 at 06:27:20ID: 25365672
To configure PVLANs on the Cisco switch, you can use the following template:
vtp transparent
vlan 201 !-- Isolated VLAN
name <iVLAN-name>
private-vlan isolated
vlan 20 !-- Primary VLAN
name <pVLAN-name>
private-vlan primary
private-vlan mapping 201
!-- Physical port config - Promiscuous port
interface <Type><Slot/subslot/port>
switchport mode private-vlan promiscuous
switchport private-vlan mapping 20 201
!-- Physical port config - Isolated port
interface <Type><Slot/subslot/port>
switchport mode private-vlan host
switchport private-vlan host-association 20 201
!-- SVI config (Promiscuous port)
interface vlan 20
private-vlan mapping 201
See the following Cisco documentation: http://www.cisco.com/en/US
Unfortunately I do not have much experience with the VMware virtual switch.