1. VLAN Trunking Protocol (VTP) W.lilakiatsakun

2. VLAN Management Challenge (1) It is not difficult to add new VLAN for a small network

3. VLAN Management Challenge (2) It is not easy to add a new VLAN to all of switches

4. What is VTP? VTP allows a network manager to configure a switch so that it will propagate VLAN configurations to other switches in the network. VTP allows a network manager to configure a switch so that it will propagate VLAN configurations to other switches in the network. The switch can be configured in the role of a VTP server or a VTP client. The switch can be configured in the role of a VTP server or a VTP client. VTP only learns about normal-range VLANs (VLAN IDs 1 to 1005). VTP only learns about normal-range VLANs (VLAN IDs 1 to 1005). Extended-range VLANs (IDs greater than 1005) are not supported by VTP. Extended-range VLANs (IDs greater than 1005) are not supported by VTP.

5. VTP Overview (1) VTP allows a network manager to makes changes on a switch that is configured as a VTP server. VTP allows a network manager to makes changes on a switch that is configured as a VTP server. Basically, the VTP server distributes and synchronizes VLAN information to VTP-enabled switches throughout the switched network, which minimizes the problems caused by incorrect configurations and configuration inconsistencies. Basically, the VTP server distributes and synchronizes VLAN information to VTP-enabled switches throughout the switched network, which minimizes the problems caused by incorrect configurations and configuration inconsistencies. VTP stores VLAN configurations in the VLAN database called vlan.dat. VTP stores VLAN configurations in the VLAN database called vlan.dat.

6. VTP Overview (2)

7. VTP benefits

8. VTP components (1) VTP Domain consists of one or more interconnected switches. VTP Domain consists of one or more interconnected switches. All switches in a domain share VLAN configuration details using VTP advertisements. All switches in a domain share VLAN configuration details using VTP advertisements. A router or Layer 3 switch defines the boundary of each domain. A router or Layer 3 switch defines the boundary of each domain.

9. VTP components (2) VTP Advertisements - VTP uses a hierarchy of advertisements to distribute and synchronize VLAN configurations across the network. VTP Advertisements - VTP uses a hierarchy of advertisements to distribute and synchronize VLAN configurations across the network.

10. VTP components (3) VTP Modes - A switch can be configured in one of three modes: server, client, or transparent. VTP Modes - A switch can be configured in one of three modes: server, client, or transparent.

11. VTP components (4) VTP Server - VTP servers advertise the VTP domain VLAN information to other VTP-enabled switches in the same VTP domain. VTP Server - VTP servers advertise the VTP domain VLAN information to other VTP-enabled switches in the same VTP domain. VTP servers store the VLAN information for the entire domain in NVRAM. VTP servers store the VLAN information for the entire domain in NVRAM. The server is where VLAN can created, deleted, or renamed for the domain. The server is where VLAN can created, deleted, or renamed for the domain.

12. VTP components (5) VTP Client - VTP clients function the same way as VTP servers, but you cannot create, change, or delete VLANs on a VTP client. VTP Client - VTP clients function the same way as VTP servers, but you cannot create, change, or delete VLANs on a VTP client. A VTP client only stores the VLAN information for the entire domain while the switch is on. A VTP client only stores the VLAN information for the entire domain while the switch is on. A switch reset deletes the VLAN information. A switch reset deletes the VLAN information. You must configure VTP client mode on a switch. You must configure VTP client mode on a switch.

13. VTP components (6) VTP Transparent - Transparent switches forward VTP advertisements to VTP clients and VTP servers. VTP Transparent - Transparent switches forward VTP advertisements to VTP clients and VTP servers. Transparent switches do not participate in VTP. Transparent switches do not participate in VTP. VLANs that are created, renamed, or deleted on transparent switches are local to that switch only. VLANs that are created, renamed, or deleted on transparent switches are local to that switch only.

14. VTP components (7) VTP Pruning-VTP pruning increases network available bandwidth by restricting flooded traffic to those trunk links that the traffic must use to reach the destination devices. VTP Pruning-VTP pruning increases network available bandwidth by restricting flooded traffic to those trunk links that the traffic must use to reach the destination devices. Without VTP pruning, a switch floods broadcast, multicast, and unknown unicast traffic across all trunk links within a VTP domain even though receiving switches might discard them. Without VTP pruning, a switch floods broadcast, multicast, and unknown unicast traffic across all trunk links within a VTP domain even though receiving switches might discard them.

15. VTP components (8)

16. Default VTP configuration

17. VTP operation – VTP domain (1) VTP allows you to separate your network into smaller management domains to help reduce VLAN management. VTP allows you to separate your network into smaller management domains to help reduce VLAN management. An additional benefit of configuring VTP domains is that it limits the extent to which configuration changes are propagated in the network if an error occurs. An additional benefit of configuring VTP domains is that it limits the extent to which configuration changes are propagated in the network if an error occurs.

18. VTP operation – VTP domain (2) A VTP domain consists of one switch or several interconnected switches sharing the same VTP domain name. A VTP domain consists of one switch or several interconnected switches sharing the same VTP domain name. A switch can be a member of only one VTP domain at a time. A switch can be a member of only one VTP domain at a time.

19. VTP operation – VTP domain (3) VTP Domain Name Propogation VTP Domain Name Propogation For a VTP server or client switch to participate in a VTP-enabled network, it must be a part of the same domain. For a VTP server or client switch to participate in a VTP-enabled network, it must be a part of the same domain. When switches are in different VTP domains, they do not exchange VTP messages. When switches are in different VTP domains, they do not exchange VTP messages. A VTP server propagates the VTP domain name to all switches for you. A VTP server propagates the VTP domain name to all switches for you. Domain name propagation uses three VTP components: servers, clients, and advertisements. Domain name propagation uses three VTP components: servers, clients, and advertisements.

20. VTP operation – VTP domain (4) Note: Cisco recommends that access to the domain name configuration functions be protected by a password.

21. VTP operation – VTP advertising (1) A VTP frame consists of a header field and a message field. The VTP information is inserted into the data field of an Ethernet frame VTP Frame Encapsulation

22. VTP operation – VTP advertising (2) The Ethernet frame is then encapsulated as a 802.1Q trunk frame (or ISL frame). (or ISL frame).

23. VTP operation – VTP advertising (3) Each switch in the domain sends periodic advertisements out each trunk port to a reserved multicast address. Each switch in the domain sends periodic advertisements out each trunk port to a reserved multicast address.

24. VTP operation – VTP advertising (4)

25. VTP operation – VTP advertising (5) Destination MAC address -This address is set to 01-00- 0C-CC-CC-CC, which is the reserved multicast address for all VTP messages. Destination MAC address -This address is set to 01-00- 0C-CC-CC-CC, which is the reserved multicast address for all VTP messages. LLC field-Logical link control (LLC) field contains a destination service access point (DSAP) and a source service access point (SSAP) set to the value of AA. LLC field-Logical link control (LLC) field contains a destination service access point (DSAP) and a source service access point (SSAP) set to the value of AA. SNAP field-Subnetwork Access Protocol (SNAP) field has an OUI set to AAAA and type set to 2003. SNAP field-Subnetwork Access Protocol (SNAP) field has an OUI set to AAAA and type set to 2003. VTP header field- The contents vary depending on the VTP message type-summary, subset, or request-but it always contains these VTP fields: VTP header field- The contents vary depending on the VTP message type-summary, subset, or request-but it always contains these VTP fields:

26. VTP operation – VTP advertising (6) –Domain name- Identifies the administrative domain for the switch. –Domain name length- Length of the domain name. –Version- Set to either VTP 1, VTP 2, or VTP 3. The Cisco 2960 switch only supports VTP 1 and VTP 2. –Configuration revision number- The current configuration revision number on this switch.

27. VTP operation – VTP advertising (7) VTP message field-Varies depending on the message type. VTP message field-Varies depending on the message type. VTP Message Contents VTP Message Contents

28. VTP Revision Number (1) The configuration revision number is a 32-bit number that indicates the level of revision for a VTP frame. The configuration revision number is a 32-bit number that indicates the level of revision for a VTP frame. The default configuration number for a switch is zero. The default configuration number for a switch is zero. Each time a VLAN is added or removed, the configuration revision number is incremented. Each time a VLAN is added or removed, the configuration revision number is incremented. Each VTP device tracks the VTP configuration revision number that is assigned to it. Each VTP device tracks the VTP configuration revision number that is assigned to it.

29. VTP Revision Number (2)

30. VTP Advertisements (1) Summary Advertisements Summary Advertisements –The summary advertisement contains the VTP domain name, the current revision number, and other VTP configuration details. Summary advertisements are sent: Summary advertisements are sent: Every 5 minutes by a VTP server or client to inform neighboring VTP-enabled switches of the current VTP configuration revision number for its VTP domain Every 5 minutes by a VTP server or client to inform neighboring VTP-enabled switches of the current VTP configuration revision number for its VTP domain Immediately after a configuration has been made Immediately after a configuration has been made

31. VTP Advertisements (2) Subset Advertisements - A subset advertisement contains VLAN information. Subset Advertisements - A subset advertisement contains VLAN information. Changes that trigger the subset advertisement include: Changes that trigger the subset advertisement include: –Creating or deleting a VLAN –Suspending or activating a VLAN –Changing the name of a VLAN –Changing the MTU of a VLAN It may take multiple subset advertisements to fully update the VLAN information. It may take multiple subset advertisements to fully update the VLAN information.

32. VTP Advertisements (3) Request Advertisements Request Advertisements When a request advertisement is sent to a VTP server in the same VTP domain, the VTP server responds by sending a summary advertisement and then a subset advertisement. When a request advertisement is sent to a VTP server in the same VTP domain, the VTP server responds by sending a summary advertisement and then a subset advertisement. Request advertisements are sent if: Request advertisements are sent if: –The VTP domain name has been changed –The switch receives a summary advertisement with a higher configuration revision number than its own –A subset advertisement message is missed for some reason –The switch has been reset

34. VTP mode (1) Server Mode - In server mode, you can create, modify, and delete VLANs for the entire VTP domain. Server Mode - In server mode, you can create, modify, and delete VLANs for the entire VTP domain. VTP server mode is the default mode for a Cisco switch. VTP server mode is the default mode for a Cisco switch. VTP servers advertise their VLAN configurations to other switches in the same VTP domain and synchronize their VLAN configurations with other switches based on advertisements received over trunk links. VTP servers advertise their VLAN configurations to other switches in the same VTP domain and synchronize their VLAN configurations with other switches based on advertisements received over trunk links. VTP servers keep track of updates through a configuration revision number. VTP servers keep track of updates through a configuration revision number. Other switches in the same VTP domain compare their configuration revision number with the revision number received from a VTP server to see if they need to synchronize their VLAN database. Other switches in the same VTP domain compare their configuration revision number with the revision number received from a VTP server to see if they need to synchronize their VLAN database.

35. VTP mode (2) Client Mode Client Mode If a switch is in client mode, you cannot create, change, or delete VLANs. If a switch is in client mode, you cannot create, change, or delete VLANs. In addition, the VLAN configuration information that a VTP client switch receives from a VTP server switch is stored in a VLAN database, not in NVRAM. In addition, the VLAN configuration information that a VTP client switch receives from a VTP server switch is stored in a VLAN database, not in NVRAM. Consequently, VTP clients require less memory than VTP servers. Consequently, VTP clients require less memory than VTP servers. When a VTP client is shut down and restarted, it sends a request advertisement to a VTP server for updated VLAN configuration information. When a VTP client is shut down and restarted, it sends a request advertisement to a VTP server for updated VLAN configuration information.

36. VTP mode (3) Transparent Mode Transparent Mode Switches configured in transparent mode forward VTP advertisements that they receive on trunk ports to other switches in the network. Switches configured in transparent mode forward VTP advertisements that they receive on trunk ports to other switches in the network. VTP transparent mode switches do not advertise their VLAN configuration and do not synchronize their VLAN configuration with any other switch. VTP transparent mode switches do not advertise their VLAN configuration and do not synchronize their VLAN configuration with any other switch. Configure a switch in VTP transparent mode when you have VLAN configurations that have local significance and should not be shared with the rest of the network. Configure a switch in VTP transparent mode when you have VLAN configurations that have local significance and should not be shared with the rest of the network.

37. VTP mode (4)

44. VTP Pruning (1) VTP pruning prevents unnecessary flooding of broadcast information from one VLAN across all trunks in a VTP domain. VTP pruning prevents unnecessary flooding of broadcast information from one VLAN across all trunks in a VTP domain. VTP pruning permits switches to negotiate which VLANs are assigned to ports at the other end of a trunk and, hence, prune the VLANs that are not assigned to ports on the remote switch. VTP pruning permits switches to negotiate which VLANs are assigned to ports at the other end of a trunk and, hence, prune the VLANs that are not assigned to ports on the remote switch. Pruning is disabled by default. Pruning is disabled by default. VTP pruning is enabled using the vtp pruning global configuration command. VTP pruning is enabled using the vtp pruning global configuration command. You need to enable pruning on only one VTP server switch in the domain. You need to enable pruning on only one VTP server switch in the domain.

45. VTP Pruning (2)

46. VTP Pruning (3)

47. VTP Pruning (4)

48. Configuring VTP – VTP Server switches (1) Confirm that all of the switches you are going to configure have been set to their default settings. Confirm that all of the switches you are going to configure have been set to their default settings. Always reset the configuration revision number before installing a previously configured switch into a VTP domain. Always reset the configuration revision number before installing a previously configured switch into a VTP domain. –Not resetting the configuration revision number allows for potential disruption in the VLAN configuration across the rest of the switches in the VTP domain. Configure at least two VTP server switches in your network. Configure at least two VTP server switches in your network. –Because only server switches can create, delete, and modify VLANs, you should make sure that you have one backup VTP server in case the primary VTP server becomes disabled. –If all the switches in the network are configured in VTP client mode, you cannot create new VLANs on the network.

49. Configuring VTP – VTP Server switches (2) Configure a VTP domain on the VTP server. Configure a VTP domain on the VTP server. – Configuring the VTP domain on the first switch enables VTP to start advertising VLAN information. – Other switches connected through trunk links receive the VTP domain information automatically through VTP advertisements. If there is an existing VTP domain, make sure that you match the name exactly. VTP domain names are case- sensitive. If there is an existing VTP domain, make sure that you match the name exactly. VTP domain names are case- sensitive. If you are configuring a VTP password, ensure that the same password is set on all switches in the domain that need to be able to exchange VTP information. If you are configuring a VTP password, ensure that the same password is set on all switches in the domain that need to be able to exchange VTP information. –Switches without a password or with the wrong password reject VTP advertisements.

50. Configuring VTP – VTP Server switches (3) Ensure that all switches are configured to use the same VTP protocol version. Ensure that all switches are configured to use the same VTP protocol version. –VTP version 1 is not compatible with VTP version 2. –By default, Cisco Catalyst 2960 switches run version 1 but are capable of running version 2. –When the VTP version is set to version 2, all version 2 capable switches in the domain autoconfigure to use version 2 through the VTP announcement process. Create the VLAN after you have enabled VTP on the VTP server. Create the VLAN after you have enabled VTP on the VTP server. –VLANs created before you enable VTP are removed. –Always ensure that trunk ports are configured to interconnect switches in a VTP domain. –VTP information is only exchanged on trunk ports.

51. Configuring VTP – VTP Client switches As on the VTP server switch, confirm that the default settings are present. As on the VTP server switch, confirm that the default settings are present. Configure VTP client mode. Configure VTP client mode. –Recall that the switch is not in VTP client mode by default. You have to configure this mode. Configure trunks. Configure trunks. –VTP works over trunk links. Connect to a VTP server. Connect to a VTP server. –When you connect to a VTP server or another VTP-enabled switch, it takes a few moments for the various advertisements to make their way back and forth to the VTP server. Verify VTP status. Verify VTP status. –Before you begin configuring the access ports, confirm that the revision mode and number of VLANs have been updated. Configure access ports. When a switch is in VTP client mode, you cannot add new VLANs. Configure access ports. When a switch is in VTP client mode, you cannot add new VLANs. –You can only assign access ports to existing VLANs.

52. VTP configuration guideline

53. VTP Configuration topology

54. Configuration VTP steps – Configure the VTP server (1) Configure domain name

55. Configuration VTP steps – Configure the VTP server (2) Configure VTP version

56. Configuration VTP steps – Configure the VTP server (3) ADD VLAN / Trunk and verify

57. Configuration VTP steps – Configure the VTP clients (1) Configure VTP Mode: client

58. Configuration VTP steps – Configure the VTP clients (2) Verify VTP Status

59. Configuration VTP steps – Confirm and connect (1)

60. Configuration VTP steps – Confirm and connect (2) Confirm VTP status

61. Configuration VTP steps – Confirm and connect (3) Connect to VTP Server

62. Troubleshooting VTP configurations (1)

63. Troubleshooting VTP configurations (2)

64. Troubleshooting VTP configurations (3)

65. Troubleshooting VTP configurations (4) Switches Set to VTP Client Mode Switches Set to VTP Client Mode By doing so, you lose all ability to create, delete, and manage VLANs within your network environment. By doing so, you lose all ability to create, delete, and manage VLANs within your network environment. Because the VTP client switches do not store the VLAN information in NVRAM, they need to refresh the VLAN information after a reload. Because the VTP client switches do not store the VLAN information in NVRAM, they need to refresh the VLAN information after a reload.

66. Troubleshooting VTP configurations (5)

67. Troubleshooting VTP configurations (6)

68. Troubleshooting VTP configurations (7) Incorrect Revision Number

69. Managing VLAN on VTP servers (1)

70. Managing VLAN on VTP servers (2) Configure new VLAN and Port

71. Managing VLAN on VTP servers (3) Show VTP status

72. Managing VLAN on VTP servers (4) Show interfaces trunk