Week 2

Chapter 2: Scaling VLANs

This chapter will examine some of the strategies and protocols that can be used to manage VLANs and
trunks.
Week 2 Chapter 2: Scaling VLANs

Objectives

 Configure enhanced inter-switch connectivity technologies.

• Compare VTP versions 1 and 2.
• Configure VTP versions 1 and 2.
• Configure extended VLANs.
• Configure Dynamic Trunking Protocol (DTP).
Week 2 Chapter 2: Scaling VLANs

Objectives

 Troubleshoot issues in an inter-VLAN routing environment.

• Troubleshoot common inter-VLAN configuration issues.
• Troubleshoot common IP addressing issues in an inter-VLAN
routed environment.
• Troubleshoot common VTP and DTP issues in an inter-VLAN
routed environment.
VTP Concepts and Operation
VTP Overview
• VLAN trunking protocol (VTP) allows a network administrator to manage VLANs on a switch
configured as a VTP server.
• The VTP server distributes and synchronizes VLAN information over trunk links to VTP-enabled
switches throughout the switched network.
VTP Concepts and Operation
VTP Modes
VTP Concepts and Operation
VTP Modes
VTP Concepts and Operation
VTP Advertisements

• Summary advertisements – contain VTP

domain name and configuration revision
number.
• Advertisement request - response to a
summary advertisement message when the
summary advertisement contains a higher
configuration revision number than the
current value.
• Subset advertisements - contain VLAN
information including any changes.
VTP Concepts and Operation
VTP Versions

Switches in the same VTP domain must use the same VTP version.
VTP Concepts and Operation
Default VTP configuration
Verify Default VTP Status The show vtp status command displays the
VTP status which includes the following:
• VTP Version capable and running
• VTP Domain Name
• VTP Pruning Mode
• VTP Traps Generation
• Device ID
• Configuration Last Modified
• VTP Operating Mode
• Maximum VLANs Supported Locally
• Number of Existing VLANs
• Configuration Revision
• MD5 Digest
VTP Concepts and Operation
VTP Caveats

VTP configuration revision number is

stored in NVRAM.

To reset VTP configuration revision

number to zero:
• Change the switch's VTP domain
to a nonexistent VTP domain
and then change the domain
back to the original name.
• Change the switch's VTP mode
to transparent and then back to
previous VTP mode.
VTP Configuration
VTP Configuration Overview

Steps to Configure VTP:

Step 1 - Configure the VTP Server
Step 2 - Configure the VTP Domain
Name and Password
Step 3 - Configure the VTP Clients
Step 4 - Configure VLANs on the
VTP Server.
Step 5 - Verify the VTP clients have
received the new VLAN information.
VTP Configuration
Step 1 – Configure the VTP Server
Use the vtp mode server command to
configure a switch as a VTP server.

• Confirm all switches are configured with

default configuration before issuing this
command to avoid problems with
configuration revision numbers.

Use the show vtp status to verify.

• Notice configuration revision number is

still set to 0 and number of existing
VLANS is 5.

• The 5 VLANs are the default VLAN 1

and VLANs 1002-1005.
 VTP Configuration
Step 2 – Configure the VTP Domain Name and Password
Use the vtp domain domain-name command
to configure the domain name.

• VTP client must have same domain

name as the VTP server before it will
accept VTP advertisements.

Configure a password using the vtp password

password command.

• Use the show vtp password command

to verify.
VTP Configuration
Step 3 – Configure the VTP Clients

Use the vtp mode client command to configure the VTP clients.

Use same domain name and password as VTP server.

 VTP Configuration
Step 4 – Configure VLANs on the VTP Server
Use the vlan vlan-number command to create
VLANs.

Use show vlan brief to verify the VLANs.

Use show vtp status to verify server status.

• Every time a VLAN is added the

configuration register is incremented
 VTP Configuration
Step 5 – Verify that the VTP Clients Have Received the New VLAN Information

Use the show vlan brief command to verify that

the client received the new VLAN information.

Verify client status using the show vtp status

command.
 Extended VLANs
VLAN Ranges on Catalyst Switches
Catalyst 2960 and 3560 Series switches
support over 4,000 VLANs.

Normal range VLANs are numbered 1 to

1,005.

• Stored in vlan.dat file

Extended range VLANs are numbered

1,006 to 4,094.

• Not stored in vlan.dat file

• VTP does not learn

Extended VLANs
Creating a VLAN
Normal range VLANs are stored in flash in
vlan.dat

Use vlan vlan-id to create a VLAN

• Use name vlan-name to name the

VLAN

• Naming each VLAN is considered a

best practice in switch configuration.

To configure multiple VLANs, a series of

VLAN IDs can be entered separated by
commas, or a range of VLAN IDs separated
by hyphens.

• vlan 100,102,105-107
 Extended VLANs
Assigning Ports to VLANs
Access port can belong to only one VLAN
at a time.

• Only exception is when an IP phone

is connected to the port. Then there
are two VLANs associated with the
port: one for voice and one for data.

Note: Use the interface range command

to simultaneously configure multiple
interfaces.
Extended VLANs
Verifying VLAN Information
Commands to verify VLANs:

• show vlan

• show interfaces

• show vlan name vlan-name

• show vlan brief

• show vlan summary

• show interfaces vlan vlan-id

Extended VLANs
Configuring Extended VLANs
Extended range VLANs are identified by a
VLAN ID between 1006 and 4094.

To configure an extended VLAN on a 2960

switch it must be set to VTP transparent
mode. (By default 2960 switches do not
support Extended range VLANs.)
 Dynamic Trunking Protocol
Introduction to DTP

Trunk negotiation is managed by the Dynamic Trunking Protocol (DTP)

• DTP is a Cisco proprietary protocol

• automatically enabled on Catalyst 2960 and Catalyst 3560 Series switches.

To enable trunking from a Cisco switch to a device that does not support DTP, use the switchport mode trunk and switchport
nonegotiate
 Dynamic Trunking Protocol
Negotiated Interface Modes
Different trunking modes:
• Switchport mode access - interface becomes a
nontrunk interface.
• Switchport mode dynamic auto - interface
becomes a trunk if the neighboring interface is
set to trunk or desirable mode.
• Switchport mode dynamic desirable -
interface becomes a trunk if the neighboring
interface is set to trunk, desirable, or dynamic
auto mode.
• Switchport mode trunk - interface becomes a
trunk even if the neighboring interface is not a
trunk interface.
 Configure trunk links statically whenever
• Switchport nonegotiate - prevents the possible.
interface from generating DTP frames.  Use show dtp interface to verify DTP.
Inter-VLAN Configuration Issues
Deleting VLANs
Assume S1 has VLANs 10, 20, and 99 configured, Deleting a VLAN from a switch that is in
VLAN 99 is assigned to ports Fa0/18 through Fa0/24. VTP server mode removes the VLAN from
all switches in the VTP domain.

Note: You cannot delete the default VLANs

(i.e., VLAN 1, 1002 - 1005).

Use the no vlan vlan-id global

configuration mode command to delete a
VLAN.

Any ports assigned to that VLAN become

inactive. They remain inactive until assigned
to a new VLAN.
 Inter-VLAN Configuration Issues
Switch Port Issues
When using the legacy routing model for inter-VLAN routing, the switch ports connected to the
router interfaces must be configured with the correct VLANs.

• S1 F0/4 is in the
default VLAN
• Must be in access
mode, VLAN 10
 Inter-VLAN Configuration Issues
Switch Port Issues (Cont.)
When using the router-on-a-stick routing model the interface on the switch connected to the router
must be configured as a trunk port.

INCORRECT
• Interface F0/5 on switch
S1 is not configured as a
trunk and is left in the
default VLAN for the
port
Inter-VLAN Configuration Issues
Verify Switch Configuration
Commands to verify switch configuration:

• show interfaces interface-id switchport

• show running-config
 Inter-VLAN Configuration Issues
Interface Issues
When enabling inter-VLAN routing
on a router, one of the most
common configuration errors is to
connect the physical router interface
to the wrong switch port.
Inter-VLAN Configuration Issues
Verify Routing Configuration
With router-on-a-stick configurations, a common
problem is assigning the wrong VLAN ID to the
subinterface.

Use show interfaces and the show running-config

commands to verify the routing configurations.
IP Addressing Issues
Errors with IP Addresses and Subnet Masks
For inter-VLAN routing to operate, a router must be
connected to all VLANs, either by separate physical
interfaces or by subinterfaces.

Each interface, or subinterface, must be assigned an

IP address that corresponds to the subnet to which
it is connected.

Each PC must be configured with an IP address

within the VLAN it is assigned to.

Incorrect IP address
 IP Addressing Issues
Verifying IP Address and Subnet Mask Configuration Issues
A common error is to incorrectly configure an IP address for a subinterface.
• Use show run and show ip interface to verify IP addressing.
Another error is incorrectly addressing the end device.
• Use ipconfig to verify the address on a Windows PC
VTP and DTP Issues
Troubleshoot VTP Issues
VTP and DTP Issues
Troubleshoot DTP Issues
Common Problems with Trunks
Layer 3 Switching Operation and Configuration
Introduction to Layer 3 Switching
Multilayer switches provide high-packet processing
rates using hardware-based switching.

Catalyst multilayer switches support the following

types of Layer 3 interfaces:

• Routed port - A layer 3 interface

• Switch virtual interface (SVI) - Virtual

Interface for inter- VLAN routing

All Layer 3 Cisco Catalyst switches support routing

protocols, but several models require enhanced
software for specific routing protocol features.

Catalyst 2960 Series switches running IOS 12.2(55)

or later, support static routing.
 Layer 3 Switching Operation and Configuration
Inter-VLAN Routing with Switch Virtual Interfaces
In the early days of switched networks, switching
was fast and routing was slow. Therefore the
layer 2 switching portion was extended as much
as possible into the network.

Now routing can be performed at wire speed, and is performed

at both the distribution and core layers.

Distribution switches are configured as Layer 3 gateways using

Switch Virtual Interfaces (SVIs) or routed ports.

Routed ports are usually implemented between the distribution

and core layers.
 Layer 3 Switching Operation and Configuration
Inter-VLAN Routing with Switch Virtual Interfaces (Cont.)
An SVI is a virtual interface that is configured within a
multilayer switch:

• To provide a gateway for a VLAN so that traffic

can be routed into or out of that VLAN.

• To provide Layer 3 IP connectivity to the switch.

• To support routing protocol and bridging

configurations.

Advantages of SVIs:

• Faster than router-on-a-stick.

• No need for external links from the switch to

the router for routing.

• Not limited to one link. Layer 2 EtherChannels

can be used to get more bandwidth.
Layer 3 Switching Operation and Configuration
Inter-VLAN Routing with Routed Ports
A routed port is a physical port that acts similarly to an
interface on a router:

• It is not associated with a particular VLAN.

• It does not support subinterfaces.

Routed ports are primarily configured between

switches in the core and distribution layer.

Use the no switchport interface command on the

appropriate port to configure a routed port.

Note: Routed ports are not supported on Catalyst

2960 Series switches.
Troubleshoot Layer 3 Switching
Layer 3 Switch Configuration Issues
To troubleshoot Layer 3 switching issues check
the following:

• VLANs – verify correct configuration.

• SVIs - verify correct IP, subnet mask and

VLAN number.

• Routing - verify that either static or

dynamic routing is correctly configured
and enabled.

• Hosts – verify correct IP, subnet mask, and

default gateway.
 Troubleshoot Layer 3 Switching
Example: Troubleshooting Layer 3 Switching
There are four steps to implementing a new VLAN:
• Step 1. Create and name a new VLAN 500 on the fifth
floor switch and on the distribution switches.
• Step 2. Add ports to VLAN 500 and ensure that the trunk
is set up between distribution switches.
• Step 3. Create an SVI interface on the distribution switches
and ensure that IP addresses are assigned.
• Step 4. Verify connectivity.
The troubleshooting plan checks for the following:
• Step 1. Verify that all VLANs have been created.
• Step 2. Ensure that ports are in the right VLAN and
trunking is working as expected.
• Step 3. Verify SVI configurations.
New Terms and Commands

• virtual local area networks (VLANs) • Subset advertisements

• trunks • normal range VLANs
• VLAN Trunking Protocol (VTP) • inter-VLAN routing
• Dynamic Trunking Protocol (DTP) • legacy inter-VLAN routing
• extended range VLANs • router-on-a-stick inter-VLAN routing
• vlan.dat • Layer 3 inter-VLAN routing
• VTP Domain • Routed port
• VTP Advertisements • Switch Virtual Interface (SVI)
• VTP Modes • Cisco Express Forwarding
• VTP Server
• VTP Client
• VTP Transparent
• Summary advertisements
• Advertisement request
Resource materials reference

Internet/Online Reference
www.netacad.com