I believe you have two issues with your first solution. 1. If I remember proctor labs topology correctly, r2's 0/1 interface is connected to sw2 and r6's 0/0 is connected to sw1. If that's the case, sw protected won't protect you from anything because it doesn't work across switches.
2. If r2 and r6 were connected to the same switch and switch port protected, they wouldn't be able to talk to one another but everything else in the vlan that's not switch port protected. You said that r6 and r2 would talk via layer 3 r1. If r2 and r6 are in the same vlan, what mechanism would you use to make that happen? Based on your requirements, it's my opinion that you need to configure a parent vlan and two community vlans. Sent from my iPhone On Jan 12, 2013, at 10:01 AM, Lukasz <[email protected]> wrote: > Hi All, > > > I am using proctorlabs to run some tests on private vlans and on switchport > protected command. > > > My scenario is as follows: > > > R1 Fa0/1 --- Fa0/1 Cat2 fa0/2 --- Gi0/1 R2 > Fa0/6 --- Fa0/0 R6 > Fa0/7 --- Fa0/0 R7 > Fa0/8 -- Fa0/0 R8 > > > Router interfaces are in 10.1.2.x/24 network where x is routers number. > > Tasks: > - Routers (R2,R6,R7,R8) should be in the same VLAN. > - R2 and R6 should talk to each other but they should not be able to talk to > R7 and R8. > - R7 and R8 should be able to talk to each other and also to other devices in > the same vlan (when they will be added in the future). > > First without any settings on Cat2 I have run ping from R1 to other routers > and it was successfull. > > My suggested solution. Put switchport protected on fa0/2 and fa0/6 so they > should be able to talk to each other via Layer 3 device (R1). > Put R7 and R8 in community private-vlan so they can talk to each > other but not to R2 and R6. > > Is that logic correct? > > > Thanks for all comments. > > > Regards, > Lukasz > > > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > > Are you a CCNP or CCIE and looking for a job? Check out > www.PlatinumPlacement.com > > http://onlinestudylist.com/mailman/listinfo/ccie_rs _______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com http://onlinestudylist.com/mailman/listinfo/ccie_rs
