private vlan

配置呢，可以粘出来一起看下，vlan11 12没有配置dhcp吗？

#sysname A

vlan 1

#

vlan 11 to 12

#

vlan 21 to 22

#

vlan 100

 private-vlan primary

 private-vlan secondary 11 to 12

#

vlan 200

 private-vlan primary

 private-vlan secondary 21 to 22

#

 stp global enable

#

interface NULL0

#

interface GigabitEthernet1/0/1

 port link-mode bridge

 port link-type hybrid

 port hybrid vlan 11 to 12 21 to 22 100 200 tagged

 port hybrid vlan 1 untagged

 port private-vlan 100 200 trunk promiscuous

 combo enable fiber

#

interface GigabitEthernet1/0/2

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 22 200 untagged

 port hybrid pvid vlan 22

 port private-vlan host

 combo enable fiber

#

interface GigabitEthernet1/0/3

 port link-mode bridge

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 12 100 untagged

 port hybrid pvid vlan 12

 port private-vlan host

 combo enable fiber

#

interface GigabitEthernet1/0/4

 port link-mode bridge

 port link-type hybrid

 port hybrid vlan 11 21 100 200 tagged

 port hybrid vlan 1 untagged

 port private-vlan 11 21 trunk secondary

 combo enable fiber

sysname C

#

 irf mac-address persistent timer

 irf auto-update enable

 undo irf link-delay

 irf member 1 priority 1

#

 dhcp enable

#

 lldp global enable

#

 system-working-mode standard

 xbar load-single

 password-recovery enable

 lpu-type f-series

#

vlan 1

#

vlan 100

#

vlan 200

#

 stp global enable

#

dhcp server ip-pool 100

 gateway-list 192.168.100.1

 network 192.168.100.0 mask 255.255.255.0

#

dhcp server ip-pool 200

 gateway-list 192.168.200.1

 network 192.168.200.0 mask 255.255.255.0

#

interface NULL0

#

interface Vlan-interface100

 ip address 192.168.100.1 255.255.255.0

 dhcp server apply ip-pool 100

#

interface Vlan-interface200

 ip address 192.168.200.1 255.255.255.0

 dhcp server apply ip-pool 200

#

interface FortyGigE1/0/53

 port link-mode bridge

#

interface FortyGigE1/0/54

 port link-mode bridge

#

interface GigabitEthernet1/0/1

 port link-mode bridge

 port link-type hybrid

 port hybrid vlan 100 200 tagged

 port hybrid vlan 1 untagged

 combo enable fiber

#

sysname B

<B>system-view

System View: return to User View with Ctrl+Z.

[B]DIS CU

#

 version 7.1.075, Alpha 7571

#

 sysname B

#

 irf mac-address persistent timer

 irf auto-update enable

 undo irf link-delay

 irf member 1 priority 1

#

 lldp global enable

#

 system-working-mode standard

 xbar load-single

 password-recovery enable

 lpu-type f-series

#

vlan 1

#

vlan 11

#

vlan 21

#

 stp global enable

#

interface NULL0

#

interface FortyGigE1/0/53

 port link-mode bridge

#

interface FortyGigE1/0/54

 port link-mode bridge

#

interface GigabitEthernet1/0/1

 port link-mode bridge

 port link-type hybrid

 port hybrid vlan 11 21 tagged

 port hybrid vlan 1 untagged

 combo enable fiber

#

interface GigabitEthernet1/0/2

 port link-mode bridge

 port access vlan 11

 combo enable fiber

#

interface GigabitEthernet1/0/3

 port link-mode bridge

 port access vlan 21

 combo enable fiber

#

isolate –user-vlan、private vlan、ip-subnet-vlan等实验建议真机测试，不推荐模拟器。