15-7
PC1 connects to the interface Ethernet 1/0/7 of SwitchB, PC2 connects to the interface Ethernet 1/0/9 of
SwitchB, Ethernet 1/0/10 of SwitchA connect to Ethernet 1/0/10 of SwitchB.
It is required that PC1 and PC2 can not mutually access due to reason of the security, but PC1 and PC2 can
access other network resources through the gateway SwitchA. We can implement this status through Hybrid
port.
Configuration items are as follows:
the VLANs are allowed to pass
Port 1/0/10 of Switch A Access 10
Allow the packets of VLAN 10 to pass
Port 1/0/10 of Switch B Hybrid 10
Allow the packets of VLAN 7, 9, 10 to
Port 1/0/7 of Switch B Hybrid 7
Allow the packets of VLAN 7, 10 to pass
Port 1/0/9 of Switch B Hybrid 9
Allow the packets of VLAN 9, 10 to pass
The configuration steps are listed below:
Switch A:
Switch (config)#vlan 10
Switch (Config-Vlan10)#switchport interface ethernet 1/0/10
Switch B:
Switch(config)#vlan 7;9;10
Switch(config)#interface ethernet 1/0/7
Switch(Config-If-Ethernet1/0/7)#switchport mode hybrid
Switch(Config-If-Ethernet1/0/7)#switchport hybrid native vlan 7
Switch(Config-If-Ethernet1/0/7)#switchport hybrid allowed vlan 7;10 untag
Switch(Config-If-Ethernet1/0/7)#exit
Switch(Config)#interface Ethernet 1/0/9
Switch(Config-If-Ethernet1/0/9)#switchport mode hybrid
Switch(Config-If-Ethernet1/0/9)#switchport hybrid native vlan 9
Switch(Config-If-Ethernet1/0/9)#switchport hybrid allowed vlan 9;10 untag
Switch(Config-If-Ethernet1/0/9)#exit
Switch(Config)#interface Ethernet 1/0/10
Switch(Config-If-Ethernet1/0/10)#switchport mode hybrid
Switch(Config-If-Ethernet1/0/10)#switchport hybrid native vlan 10
Switch(Config-If-Ethernet1/0/10)#switchport hybrid allowed vlan 7;9;10 untag
Switch(Config-If-Ethernet1/0/10)#exit
Comments to this Manuals