cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Popup Hotspot Using ISR 1000 with WiFi/LTE for Teleworkers and Micro Branchesr
1628
Views
0
Helpful
4
Replies
Highlighted
Beginner

Private VLAN Configuration: SG300

I was hoping someone could help me out with configuring Private VLANs on my SG300 Small Business switch.

 

I've configured 10 private VLANS (100, 110...190) and setup VLAN 10 as my Primary one (also setup VLAN 13 as isolated). The issue I'm having is that even after assigning a port to VLAN 100, the host that I have attached to that port is unable to reach the Gateway which I have configured for VLAN 10. It's like it's completely isolated. What do you supposed I'm missing?

 

Just as a heads up, I have very little networking experience, so it's most likely something very basic that I'm missing. Thanks in advanced!

 

01.png02.png03.png04.png05.png

06.png

07.png

Everyone's tags (2)
4 REPLIES 4
Highlighted
VIP Mentor

Re: Private VLAN Configuration: SG300

Hello,

 

I am not sure I understand what you are asking. If you assign a port to VLAN 100, in order to reach the gateway of VLAN 10, there must be an IPv4 interface for VLAN 100, with an IP address (192.168.100.1) which I don't see in your output. Do you have that configured ?

Highlighted
Beginner

Re: Private VLAN Configuration: SG300

Thanks for your prompt response!

 

I actually just tried, but it kicks back an error message indicating that the VLAN cannot have an IP interface.

 

As far as to clarify my issue, I just need help in configuring Private VLAN 100 to use VLAN 10 (which I have configured as 192.168.10.1) as a gateway.

I've attempted to test the host connected to the PVLAN port 100 by assigning it a static IP (192.168.100.60/24). But not no avail. It cannot reach neither the Gateway or the switch for that matter.

 

Screenshot 2017-12-31 22.36.27.png

Highlighted
VIP Mentor

Re: Private VLAN Configuration: SG300

Hello,

 

do you have VLAN 100 associated with the primary VLAN ?

 

interface vlan 10
name Primary VLAN 10
ip address 192.168.10.1 255.255.255.0
no ip address dhcp
private-vlan association add 100

Highlighted
Beginner

Re: Private VLAN Configuration: SG300

in order to let the private vlans reaches the gateway you need to configure it's port as a promiscuous port

Consider your gateway is on gi1

#interface gi1

#switchport mode private-vlan promiscuous

#switchport private-vlan mapping 10 add 100,110

 

as 10 is your primary and 100,110,.... are secondary

CreatePlease to create content
Content for Community-Ad