VLANs

Cisco
Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Confidential 1
 Overview of VLANs
VLAN Definitions

▪ A VLAN is a logical partition of a Layer 2 network.

▪ VLANs allow an administrator to segment networks based on
factors such as function, project team, or application, without
regard for the physical location of the user or device.
▪ Multiple partitions can be created, allowing for multiple VLANs to
co-exist.
▪ Each VLAN is a broadcast domain, usually with its own IP network.
▪ VLANs are mutually isolated and packets can only pass between
them via a router.
▪ The hosts grouped within a VLAN are unaware of the VLAN’s
existence.

Cisco
Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Confidential 2
 Overview of VLANs
VLAN Definitions (cont.)

Cisco
Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Confidential 3
 Overview of VLANs
Benefits of VLANs
▪ Security
▪ Cost reduction
▪ Better performance
▪ Shrink broadcast domains
▪ Improved IT staff efficiency
▪ Simpler project and application management

Cisco
Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Confidential 4
 Overview of VLANs
Types of VLANs
▪ Data VLAN : user generated traffic
▪ Default VLAN : all switch ports become part of this
VLAN until switch is configured, show VLAN brief
▪ Native VLAN : used for untagged traffic
▪ Management VLAN : used to access management
capabilities

Cisco
Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Confidential 5
 Overview of VLANs
Types of VLANs (cont.)

Cisco
Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Confidential 6
 VLANs in a Multi-Switched Environment
VLAN Trunks
▪ A VLAN trunk carries more than one VLAN.
▪ A VLAN trunk is usually established between switches
so same-VLAN devices can communicate, even if
physically connected to different switches.
▪ A VLAN trunk is not associated to any VLANs; neither is
the trunk ports used to establish the trunk link.
▪ Cisco IOS supports IEEE802.1q, a popular VLAN trunk
protocol.

Cisco
Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Confidential 7
 VLANs in a Multi-Switched Environment
VLAN Trunks (cont.)

Cisco
Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Confidential 8
 VLANs in a Multi-Switched Environment
Controlling Broadcast Domains with VLANs
▪ VLANs can be used to limit the reach of broadcast
frames.
▪ A VLAN is a broadcast domain of its own.
▪ A broadcast frame sent by a device in a specific VLAN is
forwarded within that VLAN only.
▪ VLANs help control the reach of broadcast frames and
their impact in the network.
▪ Unicast and multicast frames are forwarded within the
originating VLAN.

Cisco
Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Confidential 9
 3.2 VLAN Implementations

Cisco
Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Confidential 10
 VLAN Assignment
VLAN Ranges on Catalyst Switches
▪ Cisco Catalyst 2960 and 3560 Series switches support
over 4,000 VLANs.
▪ VLANs are split into two categories:
• Normal range VLANs
• VLAN numbers from 1 to 1,005
• Configurations stored in the vlan.dat (in the flash
memory)
• Extended Range VLANs
• VLAN numbers from 1,006 to 4,096
• Configurations stored in the running configuration
(NVRAM)

Cisco
Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Confidential 11
 VLAN Assignment
Creating a VLAN

Cisco
Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Confidential 12
 VLAN Assignment
Assigning Ports to VLANs

Cisco
Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Confidential 13
 VLAN Assignment
Assigning Ports to VLANs (cont.)

Cisco
Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Confidential 14
 VLAN Assignment
Changing VLAN Port Membership

Cisco
Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Confidential 15
 VLAN Assignment
Changing VLAN Port Membership (cont.)

Cisco
Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Confidential 16
 VLAN Assignment
Deleting VLANs

Cisco
Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Confidential 17
 VLAN Assignment
Verifying VLAN Information

Cisco
Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Confidential 18
 VLAN Assignment
Verifying VLAN Information (cont.)

Cisco
Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Confidential 19
 VLAN Assignment
Configuring IEEE 802.1q Trunk Links

Cisco
Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Confidential 20
 VLAN Assignment
Resetting the Trunk To Default State

Cisco
Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Confidential 21
 VLAN Assignment
Resetting the Trunk To Default State (cont.)

Cisco
Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Confidential 22
 VLAN Assignment
Verifying Trunk Configuration

Cisco
Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Confidential 23