VLANs 10 and 20 are primary VLANs on Device A. The uplink port Ten-GigabitEthernet 1/1/9
•
permits the packets from VLANs 10 and 20 to pass through tagged.
VLANs 1 1, 12, 21, and 22 are secondary VLANs on Device A.
•
The downlink port Ten-GigabitEthernet 1/1/6 permits the packets from VLANs 1 1 and 21 to
pass through tagged.
The downlink port Ten-GigabitEthernet 1/1/5 permits VLAN 22.
The downlink port Ten-GigabitEthernet 1/1/7 permits VLAN 12.
Secondary VLANs 1 1 and 12 are associated with primary VLAN 10.
•
•
Secondary VLANs 21 and 22 are associated with primary VLAN 20.
Figure 47 Network diagram
VLAN 10
VLAN 20
Configuration procedure
1.
Configure Device A:
# Configure VLANs 10 and 20 as primary VLANs.
<DeviceA> system-view
[DeviceA] vlan 10
[DeviceA-vlan10] private-vlan primary
[DeviceA-vlan10] quit
[DeviceA] vlan 20
[DeviceA-vlan20] private-vlan primary
[DeviceA-vlan20] quit
# Create VLANs 11, 12, 21, and 22.
[DeviceA] vlan 11 to 12
[DeviceA] vlan 21 to 22
# Associate secondary VLANs 11 and 12 with primary VLAN 10.
[DeviceA] vlan 10
[DeviceA-vlan10] private-vlan secondary 11 12
Device A
XGE1/1/9 XGE1/1/9
Device C
XGE1/1/6
Device B
XGE1/1/8
Host A
VLAN 11
VLAN 12
Host D
VLAN 22
XGE1/1/7
XGE1/1/5
XGE1/1/6
Host C
XGE1/1/7
Host B
VLAN 21
166