Download presentation
Presentation is loading. Please wait.
Published byAllyson Underwood Modified over 9 years ago
1
Computer Networking Macedonia VLAN’s, VTP, InterVLAN Routing, (And if there is enough time - STP)
2
Presenter Delyan Genkov, PhD, Principal Assistant Professor at Technical University of Gabrovo, Bulgaria CCNA, CCNP, CCAI, CCSI#33190 Working at Lirex BG Ltd – Gold Cisco Partner Instructor and Main Contact in the first Bulgarian Cisco Networking Academy since 1999 Email: dgenkov@gmail.com
3
VLAN Virtual Local Area Networks Main goal – to divide the network into smaller parts
4
Why to divide a LAN? Benefits: Decreases unnecessary traffic Limits broadcasts Allows the network to grow Increases security Drawbacks More complicated and expensive devices More administrator’s knowledge required
5
Traditional network division Depends on geographic locations (Sometimes) requires more router interfaces Do not allows movement
6
VLAN division Position independent Allows easy movement Increases security (if properly configured) May use one or more router interfaces
7
Two or more VLANs on a single switch? Possible, but not common Functions as two or more separate switches I use this when there are free ports and I need another switch in the same rack The true power is when you use more switches
8
VLAN’s have Mandatory number (VLAN ID) 1 – 1024 Standard VLANs 1001 – 1024 are reserved 1025 – 4096 – Extended VLANs (SP) Optional name (Default VLAN0001, …) Type (Ethernet) MTU (Typical 1500) and so on.
9
VLAN tasks Create the VLANs in switch memory Assign ports to VLANs Types of ports: Access – resides in only one VLAN Voice VLAN – an additional VLAN for access port Trunk – allows packets for more than one VLAN
10
Typical scenario Access ports – connects computers Trunk ports – connects switches Routers?
11
VLAN Tagging IEEE 802.1q (4bytes) - Standard ISL (30 bytes) – Cisco proprietary IEEE 802.1q preferred Native VLAN – no tag Native VLAN must match in both ends
12
Tagging and Untagging
13
Cisco defaults Only VLAN 1 exists All ports are assigned in VLAN 1 All VLANs are allowed on a Trunk (you can change this) Native VLAN on all trunks is VLAN 1 Security recommendation: Do not leave computers in the native VLAN!
14
Deleting a VLAN If you delete a VLAN and the switch have ports, assigned to it – these ports remains in a non-existing VLAN and are shutdown. The right way is – first to reassign these ports in an existing VLAN, then to delete the VLAN.
15
VTP VLAN Trunking Protocol – Cisco Proprietary What was the main tasks when you configure VLANs? Creating VLANs into the switch memory Assign ports into VLANs VTP can assist you in the first task, but you still have to complete the second task
16
Imagine a network with 100 switches Instead of logging 100 times in every switch and configure a VLAN, with VTP you can do it on a single switch But be careful – with VTP you can stop the whole network with one command (or even with one connection)
17
VTP Switch modes Server Client Transparent There must be at least one server, preferably two
18
Another VTP Parameters VTP Version – 1, 2 or 3 VTP Domain name VTP Password – optional VTP Pruning Configuration Revision
19
VTP Pruning
20
VTP Defaults VTP mode: Server VTP Domain Name: null VTP Password: null VTP Version: 1 Configuration Revision: 0
21
Correct action You configure new VLAN on the server It increases configuration revision All other switches learns for the change All other gets new VLAN information and increases the configuration revision
22
Incorrect action You have a production and test networks You get a switch from test network and delete all the test VLANs, except VLAN 1 You forgot to reset the configuration revision You connect the new switch to the production network
23
InterVLAN Routing When you need to pass traffic between VLANs Not necessary in an ISP, probably needed in an organizational network Needs Layer 3 device(s) Normally every VLAN is separate IP network
24
Three common scenarios Separate interface for every VLAN “Router-on-a-stick” Using a Layer 3 switch
25
Separate interfaces Router doesn’t have to know IEEE 802.1q Every interface is connected to an access port in correct VLAN Every interface is a Default Gateway for it’s VLAN
26
Router-on-a-Stick One Routers interface, connected to a trunk port Router must speak 802.1q You must create subinterfaces for every VLAN with an IP address for default gateway The single interface may create bottleneck
27
Layer 3 switch Uses virtual interfaces There is no practical limitation for VLANs count Most scalable and fastest solution Sometimes may not fulfill all the requirements (i.e. BGP routing with the ISP’s)
28
Spanning Tree Protocol IEEE 802.1D Enables redundant topologies Blocks the redundant links, enables only one If using for two or more links between two switches, Etherchannel is preferrable But STP allows circular or more complex topologies
29
Redundant topologies
30
Broadcast Storm
31
Spanning Tree Protocol
32
Избор на Root Bridge
33
Bridge Identifier (BID) По – малкият идентификатор печели
34
Link Cost
35
Port Roles
36
Port states
37
Rapid STP (IEEE 802.1w)
38
Using STP with VLANs MSTP, PVST+, RPVST+
Similar presentations
© 2025 SlidePlayer.com. Inc.
All rights reserved.