VLAN10, VLAN20 and VLAN30

[ciscomoderator]

Hi,

We received this question from our CSC Facebook community.

http://www.facebook.com/CiscoSupportCommunity

Jinosh Krishna M

Router ! ! switch ! !-- VLAN10----- PC1 !               -----PC2 ! !--VLAN20------PC3 !              ------PC4 ! !--VLAN30------PC5  VLAN10 & VLAN20 SHOULD NOT COMMUNICATE EACH OTHER.  VLAN30 SHOULD ABLE TO ACCESS BOTH VLAN10 & VLAN20.  ROUTER SHOULD ABLE TO PING ALL PCS.  How do i configure this. pleas provide the step by step information.

[Dan-Ciprian Cicioiu]

Hi,

Private vlan could be one solution :

vtp mode transparent

vlan 10

private-vlan primary

vlan 20

private-vlan community

vlan 30

private-vlan community

vlan 10

private-vlan association 20,30

! Host config

interface x/y
switchport private-vlan host 10 20
switchport mode private-vlan host

! Router config

interface z/w
switchport private-vlan mapping 10 20,30
switchport mode private-vlan promiscuous

Dan