Chapter4_VTP

download Chapter4_VTP

of 30

Transcript of Chapter4_VTP

  • 7/29/2019 Chapter4_VTP

    1/30

    2006 Cisco Systems, Inc. All rights reserved. Cisco PublicITE I Chapter 6 1

    Implement VTP

    LAN Switching and Wireless Chapter 4

  • 7/29/2019 Chapter4_VTP

    2/30

    2006 Cisco Systems, Inc. All rights reserved. Cisco PublicITE 1 Chapter 6 2

    Objectives

    Explain the role of VTP in a converged switchednetwork

    Describe the operation of VTP: VTP domains, VTPModes, VTP Advertisements, and VTP Pruning.

    Configure VTP on the switches in a convergednetwork.

  • 7/29/2019 Chapter4_VTP

    3/30

    2006 Cisco Systems, Inc. All rights reserved. Cisco PublicITE I Chapter 6 3

    VTP

    VLAN TrunkingProtocol

    Create once and send to the other switches.

  • 7/29/2019 Chapter4_VTP

    4/30

    2006 Cisco Systems, Inc. All rights reserved. Cisco PublicITE 1 Chapter 6 4

  • 7/29/2019 Chapter4_VTP

    5/30

    2006 Cisco Systems, Inc. All rights reserved. Cisco PublicITE 1 Chapter 6 5

    Componentes del VTP

  • 7/29/2019 Chapter4_VTP

    6/30

    2006 Cisco Systems, Inc. All rights reserved. Cisco PublicITE 1 Chapter 6 6

    Benefits of VTP (VLAN TrunkingProtocol)

    Before discussing VTP, it is important to understand that VTPis not necessary in order to configure VLANs or Trunking onCisco Switches.

    Benefits

    VTP is a Cisco proprietary protocol that allows VLANconfiguration to be consistently maintained across a commonadministrative domain.

    VTP minimizes the possible configuration inconsistencies thatarise when changes are made.

    Additionally, VTP reduces the complexity of managing andmonitoring VLAN networks, allowing changes on one switch to bepropagated to other switches via VTP.

    On most Cisco switches, VTP is running and has certain defaultsalready configured.

  • 7/29/2019 Chapter4_VTP

    7/30 2006 Cisco Systems, Inc. All rights reserved. Cisco PublicITE 1 Chapter 6 7

    VTP VTP (VLAN Trunking Protocol) is used to distribute and

    synchronize information about VLANs that are configured

    throughout a switched network. Switches transmit VTP messages only on 802.1Q and ISL trunks.

    Note: VTP is not required to configure trunking between switches,but is used to simplify VLAN management.

    VTP Server

    This is the default VTP mode.

    VLANs can be created, modified, and deleted.

    VTP Client

    This behaves like a VTP server without the ability to create, change, ordelete VLANs.

    VTP Transparent

    Switches in the VTP Transparent mode do not participate in VTP.

    VTP Pruning

  • 7/29/2019 Chapter4_VTP

    8/30 2006 Cisco Systems, Inc. All rights reserved. Cisco PublicITE 1 Chapter 6 8

    VTP Operation Revision Number

    VTP advertisements are transmitted out all trunk connections,including ISL, IEEE 802.1Q, IEEE 802.10, and ATM LANE trunks.

    A critical parameter governing VTP function is the VTP configurationrevision number.

    This 32-bit number indicates the particular revision of a VTP configuration.

    A configuration revision numberstarts at 0 and increments by 1 witheach modification until it reaches 4,294,927,295, at which point itrecycles back to 0 and starts incrementing again.

    Each VTP device tracks its own VTP configuration revision number

    VTP packets contain the senders VTP configuration number.

    This information determines whether the received information is morerecent than the current version.

    If the switch receives a VTP advertisement over a trunk link, it inherits theVTP domain name and configuration revision number.

    The switch ignores advertisements that have a different VTP domainname or an earlier configuration revision number.

  • 7/29/2019 Chapter4_VTP

    9/30 2006 Cisco Systems, Inc. All rights reserved. Cisco PublicITE 1 Chapter 6 9

    VTP Operation

    VTP advertisements are sent as multicast frames. VTP servers and clients are synchronized to the latest revision number.

    VTP advertisements are sent every 5 minutes or when there is a change.

  • 7/29/2019 Chapter4_VTP

    10/30 2006 Cisco Systems, Inc. All rights reserved. Cisco PublicITE 1 Chapter 6 10

    VTP Operation

    VTP clientscannot create, modify, or delete VLANinformation.

    The only role of VTP clients is to process VLAN changes and sendVTP messages out all trunk ports.

    The VTP client maintains a full list of all VLANs within the VTPdomain, but it does not store the information in NVRAM.

    VTP clients behave the same way as VTP servers, but it is notpossible to create, change, or delete VLANs on a VTP client.

    Any changes made must be received from a VTP server

    advertisement.

  • 7/29/2019 Chapter4_VTP

    11/30 2006 Cisco Systems, Inc. All rights reserved. Cisco PublicITE 1 Chapter 6 11

    VTP Operation

    Switches in VTP transparent mode forward VTP advertisementsbut ignore information contained in the message.

    A transparent switch will not modify its database when updates arereceived, nor will the switch send out an update indicating achange in its own VLAN status.

    Except for forwarding VTP advertisements, VTP is disabled on atransparent switch.

    There is also an off VTP mode in which switches behave thesame as in the VTP transparent mode, except VTP advertisements

    are not forwarded.

  • 7/29/2019 Chapter4_VTP

    12/30 2006 Cisco Systems, Inc. All rights reserved. Cisco PublicITE 1 Chapter 6 12

    VTP configuration

    VTP can be configured by using these configurationmodes.

    VTP Configuration in global configuration mode

    VTP Configuration in VLAN configuration mode

    VLAN configuration mode is accessed by entering thevlan database privileged EXEC command.

  • 7/29/2019 Chapter4_VTP

    13/30 2006 Cisco Systems, Inc. All rights reserved. Cisco PublicITE 1 Chapter 6 13

    VTP configuration - Version

    Two different versions of VTP can run in the management domain, VTPVersion 1 and VTP Version 2.

    The two versions are not interoperable in the same VTP domain.

    The major difference between the two versions is version 2 introducessupport for Token Ring VLANs.

    If all switches in a VTP domain can run VTP Version 2, version 2 onlyneeds to be enabled on one VTP server switch, which propagates it toother VTP switches in the VTP domain.

    Version 2 should not be enabled unless every switch in the VTP domain

    supports version 2.

  • 7/29/2019 Chapter4_VTP

    14/30 2006 Cisco Systems, Inc. All rights reserved. Cisco PublicITE 1 Chapter 6 14

    VTP configuration Domain and Password

    The domain name can be between 1 and 32 characters.

    The optional password must be between 8 and 64 characterslong.

    If the switch being installed is the first switch in the network, themanagement domain will need to be created.

    However, if the network has other switches running VTP, then thenew switch will join an existing management domain.

    Caution: The domain name and password are case sensitive.

  • 7/29/2019 Chapter4_VTP

    15/30 2006 Cisco Systems, Inc. All rights reserved. Cisco PublicITE 1 Chapter 6 15

    VTP configuration Domain and Password

    By default, management domains are set to a nonsecure mode,meaning that the switches interact without using a password.

    Adding a password automatically sets the management domain tosecure mode.

    The same password must be configured on every switch in themanagement domain to use secure mode.

  • 7/29/2019 Chapter4_VTP

    16/30 2006 Cisco Systems, Inc. All rights reserved. Cisco PublicITE 1 Chapter 6 16

    VTP configuration VTP mode

    Switch#config terminalSwitch(config)#vtp mode [client|server|transparent]

    Switch#vlan database

    Switch(vlan)#vtp [client|server|transparent]

  • 7/29/2019 Chapter4_VTP

    17/30 2006 Cisco Systems, Inc. All rights reserved. Cisco PublicITE 1 Chapter 6 17

    VTP Configuration - Overview

    VTP Configuration in global configuration mode:Switch#config terminal

    Switch(config)#vtp version 2

    Switch(config)#vtp mode server

    Switch(config)#vtp domain ciscoSwitch(config)#vtp password mypassword

    VTP Configuration in VLAN configuration mode:

    Switch#vlan database

    Switch(vlan)#vtp v2-mode

    Switch(vlan)#vtp server

    Switch(vlan)#vtp domain cisco

    Switch(vlan)#vtp password mypassword

  • 7/29/2019 Chapter4_VTP

    18/30 2006 Cisco Systems, Inc. All rights reserved. Cisco PublicITE 1 Chapter 6 18

    VTP Operation

    VTP switches operate in one of three modes:Server

    Client

    Transparent

    VTP servers can create, modify, delete VLAN and VLANconfiguration parameters for the entire domain.

    VTP servers save VLAN configuration information in the switchNVRAM. VTP servers send VTP messages out to all trunk ports.

  • 7/29/2019 Chapter4_VTP

    19/30 2006 Cisco Systems, Inc. All rights reserved. Cisco PublicITE 1 Chapter 6 19

    Verifying VTP

    This command is used to verify VTP configurationsettings on a Cisco IOS command-based switch.

    status

  • 7/29/2019 Chapter4_VTP

    20/30 2006 Cisco Systems, Inc. All rights reserved. Cisco PublicITE 1 Chapter 6 20

    Verifying VTP

    This command is used to display statistics aboutadvertisements sent and received on the switch.

  • 7/29/2019 Chapter4_VTP

    21/30 2006 Cisco Systems, Inc. All rights reserved. Cisco PublicITE 1 Chapter 6 21

    Adding a switch to an existing VTP domain

    Use caution when inserting a new switch into an existing domain.

    In order to prepare a switch to enter an existing VTP domain,perform the following steps.

    Delete the VLAN database

    Erase the startup configuration

    Power cycle the switch

    This will avoid potential problems resulting from residual VLANconfigurations or adding a switch with a higher VTP configurationrevision number that could result in the propagation of incorrectVLAN information.

    From the privileged mode, issue the delete vlan.dat anderase startup-config commands, then power cycle the

    switch.

  • 7/29/2019 Chapter4_VTP

    22/30 2006 Cisco Systems, Inc. All rights reserved. Cisco PublicITE 1 Chapter 6 22

    TroubleShooting VTP

  • 7/29/2019 Chapter4_VTP

    23/30 2006 Cisco Systems, Inc. All rights reserved. Cisco PublicITE 1 Chapter 6 23

    TroubleShooting VTP

  • 7/29/2019 Chapter4_VTP

    24/30 2006 Cisco Systems, Inc. All rights reserved. Cisco PublicITE 1 Chapter 6 24

    VTP Pruning

    VTP pruning permits switches to negotiate which VLANs areassigned to ports at the other end of a trunk and, hence, prune theVLANs that are not assigned to ports on the remote switch.

    Pruning is disabled by default.

    VTP pruning is enabled using the vtp pruning in

    global configuration command.

    You need to enable pruning on only one VTP server switch in thedomain.

  • 7/29/2019 Chapter4_VTP

    25/30

    2006 Cisco Systems, Inc. All rights reserved. Cisco PublicITE 1 Chapter 6 25

    VTP Pruning

  • 7/29/2019 Chapter4_VTP

    26/30

    2006 Cisco Systems, Inc. All rights reserved. Cisco PublicITE 1 Chapter 6 26

    VTP Pruning

  • 7/29/2019 Chapter4_VTP

    27/30

    2006 Cisco Systems, Inc. All rights reserved. Cisco PublicITE 1 Chapter 6 27

  • 7/29/2019 Chapter4_VTP

    28/30

    2006 Cisco Systems, Inc. All rights reserved. Cisco PublicITE 1 Chapter 6 28

    The VTP Pruning service is supported by both VTP1 and VTP2.

    VTP pruning is possible with the use of additional VTP message types.

    When a Cisco Catalyst switch has ports associated with a VLAN, it will sendan advertisement to its neighboring switches informing them about the portsit has active on that VLAN.This information is then stored by the neighbors and used to decide ifflooded traffic from a VLAN should be forwarded to the switch via the trunk

    port or not.

  • 7/29/2019 Chapter4_VTP

    29/30

    2006 Cisco Systems, Inc. All rights reserved. Cisco PublicITE 1 Chapter 6 29

    DHCP SNOOP

    El vtp transparente havbilita el VTP Pruning ?

  • 7/29/2019 Chapter4_VTP

    30/30

    Troubleshooting