Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN Tru...

Page 1 of 34

Feedback: Help us help you Please rate this document. Excellent Good Average Fair Poor This document solved my problem. Yes No Just Browsing Suggestions to improve this document.

Virtual LANs/VLAN Trunking Protocol (VLANs/VTP)

Understanding and Configuring VLAN Trunk P

Document ID: 10558

Interactive: This document offers customized analysis of your Cisco device

This document contains Flash animation.

Contents
(512 character limit)

If you have provided a suggestion, please enter your full name and e-mail address. This information is optional and allows us to contact you if necessary. Name: E-mail:

Submit

Introduction Prerequisites Requirements Components Used Conventions Understand VTP Flash Animation: VTP VTP Messages in Detail Other VTP Options VTP V2 VTP Password VTP Pruning Use VTP in a Network VTP Configuration on Catalyst Switches Catalyst 6500/6000 Series Cisco IOS Software/Catalyst 4500/4000 Cisco III/Supervisor Engine IV), Catalyst 2950, 3550, and 3750 Series Switches Catalyst 4500/4000, 5500/5000, or 6500/6000 Series CatOS Catalyst 2900XL, 3500XL, 2950, and 3550 Catalyst Express 500 Series Switches Practical Examples VTP Troubleshooting and Caveats Unable to See VLAN Details in the show run Command Output Catalyst Switches Do Not Exchange VTP Information Catalyst Switch Automatically Changes VTP Mode from Client to Transpa CatOS Switch Changes to VTP Transparent Mode, VTP-4-UNSUPPORTE How a Recently Inserted Switch Can Cause Network Problems Reset the Configuration Revision number All Ports Inactive After Power Cycle Trunk Down, Which Causes VTP Problems VTP and STP (Logical Spanning Tree Port) The Case of VLAN 1 Troubleshoot VTP Configuration Revision Number Errors That Are Seen i Command Output Troubleshoot VTP Configuration Digest Errors That Are Seen in the show

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006

Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN Tru... Page 2 of 34

Conclusion NetPro Discussion Forums - Featured Conversations Related Information

Introduction
VLAN Trunk Protocol (VTP) reduces administration in a switched network. When you server, the VLAN is distributed through all switches in the domain. This reduces the n everywhere. VTP is a Cisco-proprietary protocol that is available on most of the Cisc Note: This document does not cover VTP Version 3. VTP Version 3 differs from VTP it is only available on Catalyst OS (CatOS) 8.1(1) or later. VTP Version 3 incorporate Make certain that you understand the differences between VTP Version 3 and prior v configuration. Refer to one of these sections of the document Configuring VTP for m Understanding How VTP Version 3 Works Interaction with VTP Version 1 and VTP Version 2 (VTP Version 3)

Prerequisites Requirements
There are no specific requirements for this document.

Components Used
This document is not restricted to specific software or hardware versions.

Conventions
Refer to Cisco Technical Tips Conventions for more information on document conve

Understand VTP Flash Animation: VTP

Refer to the VTP Flash animation Introduction to VTP VTP domain and VTP modes

, which explains these concepts for VTP V1

Common VTP problems and solutions Note: This document does not cover VTP Version 3. VTP Version 3 differs from VTP CatOS 8.1(1) or later. Refer to one of these sections of the document Configuring VT Understanding How VTP Version 3 Works Interaction with VTP Version 1 and VTP Version 2 (VTP Version 3)

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006

Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN Tru... Page 3 of 34

VTP Messages in Detail

VTP packets are sent in either Inter-Switch Link (ISL) frames or in IEEE 802.1Q (dot destination MAC address 01-00-0C-CC-CC-CC with a logical link control (LLC) code (AAAA) and a type of 2003 (in the SNAP header). This is the format of a VTP packet

Of course, you can have a VTP packet inside 802.1Q frames. In that case, the ISL h (CRC) is replaced by dot1q tagging. Now consider the detail of a VTP packet. The format of the VTP header can vary, ba VTP packets contain these fields in the header: VTP protocol version: 1, 2, or 3 VTP message types: Summary advertisements Subset advertisement Advertisement requests VTP join messages Management domain length Management domain name

Configuration Revision Number

The configuration revision number is a 32-bit number that indicates the level of revisi tracks the VTP configuration revision number that is assigned to it. Most of the VTP p revision number of the sender. This information is used in order to determine whether the received information is mo time that you make a VLAN change in a VTP device, the configuration revision is inc configuration revision of a switch, change the VTP domain name, and then change th

Summary Advertisements
By default, Catalyst switches issue summary advertisements in five-minute incremen adjacent Catalysts of the current VTP domain name and the configuration revision nu When the switch receives a summary advertisement packet, the switch compares the domain name. If the name is different, the switch simply ignores the packet. If the na compares the configuration revision to its own revision. If its own configuration revisio

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006

Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN Tru... Page 4 of 34

ignored. If it is lower, an advertisement request is sent.

This list clarifies what the fields means in the summary advertisement packet: The Followers field indicates that this packet is followed by a Subset Advertise The Updater Identity is the IP address of the switch that is the last to have inc The Update Timestamp is the date and time of the last increment of the config Message Digest 5 (MD5) carries the VTP password, if MD5 is configured and VTP update.

Subset Advertisements
When you add, delete, or change a VLAN in a Catalyst, the server Catalyst where th configuration revision and issues a summary advertisement. One or several subset a advertisement. A subset advertisement contains a list of VLAN information. If there a advertisement can be required in order to advertise all the VLANs.

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006

Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN Tru... Page 5 of 34

This formatted example shows that each VLAN information field contains information lowered-valued ISL VLAN IDs occur first:

Most of the fields in this packet are easy to understand. These are two clarifications: CodeThe format for this is 0x02 for subset advertisement. Sequence numberThis is the sequence of the packet in the stream of pack advertisement. The sequence starts with 1.

Advertisement Requests
A switch needs a VTP advertisement request in these situations: The switch has been reset. The VTP domain name has been changed. The switch has received a VTP summary advertisement with a higher configu

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006

Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN Tru... Page 6 of 34

Upon receipt of an advertisement request, a VTP device sends a summary advertise advertisements follow the summary advertisement. This is an example:

CodeThe format for this is 0x03 for an advertisement request. Start-ValueThis is used in cases in which there are several subset advertis advertisement has been received and the subsequent one (n+1) has not been advertisements from the (n+1)th one.

Other VTP Options VTP V2

VTP V2 is not much different than VTP V1. The major difference is that VTP V2 intro you use Token Ring VLANs, you must enable VTP V2. Otherwise, there is no reason

VTP Password
If you configure a password for VTP, you must configure the password on all switche must be the same password on all those switches. The VTP password that you confi byte word (MD5 value) that is carried in all summary-advertisement VTP packets.

VTP Pruning
VTP ensures that all switches in the VTP domain are aware of all VLANs. But, there unnecessary traffic. All unknown unicasts and broadcasts in a VLAN are flooded ove network receive all broadcasts, even in situations in which few users are connected i that you use in order to eliminate or prune this unnecessary traffic.

Use VTP in a Network

By default, all switches are configured to be VTP servers. This configuration is suitab size of the VLAN information is small and the information is easily stored in all switch network administrator must make a judgment call at some point, when the NVRAM s because it is duplicated on every switch. At this point, the network administrator mus and keep them as VTP servers. Everything else that participates in VTP can be turne servers should be chosen in order to provide the degree of redundancy that is desire Notes: If a switch is configured as a VTP server without a VTP domain name, you ca If a new Catalyst is attached in the border of two VTP domains, the new Cata switch that sends it a summary advertisement. The only way to attach this sw

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006

Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN Tru... Page 7 of 34

manually set a different VTP domain name. Dynamic Trunking Protocol (DTP) sends the VTP domain name in a DTP pac link that belong to different VTP domains, the trunk does not come up if you u configure the trunk mode as on or nonegotiate, on both sides, in order to a negotiation agreement. If the domain has a single VTP server and it crashes, the best and easiest wa any of the VTP clients in that domain to a VTP server. The configuration revis clients, even if the server crashes. Therefore, VTP works properly in the doma

VTP Configuration on Catalyst Switches

This section provides some basic commands in order to configure VTP on the most c Note: The Catalyst 2948G-L3 and Catalyst 4908G-L3 Layer 3 (L3) switches do not s protocols that are found on other Catalyst switches. Such protocols include VTP, DT

Catalyst 6500/6000 Series Cisco IOS Software/Catalyst 4500/4000 Cisco IOS III/Supervisor Engine IV), Catalyst 2950, 3550, and 3750 Series Switches
There are two methods that you can use in order to configure VTP, as this section sh mode method) is not available in earlier software on Catalyst 6500 series switches th 1. In VLAN database mode: In Cisco IOS Software, you can configure the VTP domain name, the VTP mo configuration mode. a. In EXEC mode, issue this command in order to enter VLAN configurat Router#vlan database !--- Issue this command in privileged EXEC mode !--- not in global configuration mode. Router(vlan)# !--- This is VLAN configuration mode.

b. Issue this command in order to set the VTP domain name: Router(vlan)#vtp mode {client | server | transp c. Issue the exit command in order to exit VLAN configuration mode. Note: The end command and the Ctrl-Z command do not work in this Router(vlan)#end Router(vlan)#^Z % Invalid input detected at '^' marker. Router(vlan)#

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006

Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN Tru... Page 8 of 34

Router(vlan)#exit APPLY completed. Exiting.... Router# 2. In global configuration mode: In Cisco IOS Software global configuration mode, you can configure all VTP p commands. This is the command format: Router(config)#vtp ? domain file interface mode password pruning version Set the name of the VTP administrative do Configure IFS filesystem file where VTP c Configure interface as the preferred sour address. Configure VTP device mode Set the password for the VTP administrati Set the administrative domain to permit p Set the administrative domain to VTP vers

In order to monitor VTP operation and status, issue these commands: Router#show vtp status Router#show vtp counters

Catalyst 4500/4000, 5500/5000, or 6500/6000 Series CatOS

Issue this command in order to set the domain name: set vtp domain name

Issue this command in order to set the mode: set vtp mode [server | client | transparent] Issue these commands in order to monitor the VTP operation and status: show vtp domain show vtp status

Catalyst 2900XL, 3500XL, 2950, and 3550

Issue these commands from the VLAN database mode: Note: This is similar to the method for Cisco 6500 series switches that run Cisco IOS vtp [client | server | transparent] vtp domain name

From enable mode, issue these commands in order to monitor VTP operation: show vtp counters

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006

Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN Tru... Page 9 of 34

show vtp status Note: The Catalyst 2900XL series switches with Cisco IOS Software Release 11.2(8 Cisco IOS Software Release 11.2(8)SA3 and earlier code do not support VTP protoc

Catalyst Express 500 Series Switches

Catalyst Express 500 series switches support only VTP transparent mode. There is c server mode. The user must manually configure all VLANs that is used on the switch Open the Switch Management, choose Configure > VLAN > Create, and fill out the VLAN on a Catalyst Express 500 series switch. Refer to the Create, Modify, and Dele (User Guide for the Catalyst Express 500 Switches)For more information.

Practical Examples
This first example involves two Catalyst 4000 switches that are connected by a Fast 1. Bing is a new switch that has no VTP domain name and no VLAN. Clic is an e the VTP domain test. 2. In this sample output from the show vtp domain command, you can see that that the switch is VTP V2-capable. But the switch does not run VTP V2 in this V2 mode is enabled with the set vtp v2 enable command: bing (enable) show vtp domain Domain Name Domain Index VTP Ve -------------------------------- ------------ -----1 2 Vlan-count Max-vlan-storage Config Revision Notifica ---------- ---------------- --------------- -------5 1023 0 disabled Last Updater V2 Mode Pruning PruneEligible on V --------------- -------- -------- -----------------0.0.0.0 disabled disabled 2-1000 bing (enable) bing (enable) show vlan VLAN Name Status IfIn ---- -------------------------------- --------- ---1 default active 67 1002 1003 1004 1005 fddi-default token-ring-default fddinet-default trnet-default show vtp domain active active active active 68 71 69 70

clic (enable)

Domain Name Domain Index VTP Ve -------------------------------- ------------ -----test 1 2 Vlan-count Max-vlan-storage Config Revision Notifica ---------- ---------------- --------------- --------

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006

Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN ...

Page 10 of 34

12

1023

11

disabled

Last Updater V2 Mode Pruning PruneEligible on V --------------- -------- -------- -----------------0.0.0.0 disabled disabled 2-1000 clic (enable) show vlan VLAN ---1 2 3 4 5 6 7 10 1002 1003 1004 1005 Name -------------------------------default VLAN0002 VLAN0003 VLAN0004 VLAN0005 VLAN0006 VLAN0007 VLAN0010 fddi-default token-ring-default fddinet-default trnet-default Status --------active active active active active active active active active active active active IfIn ---65 77 78 79 73 74 76 80 66 69 67 68

3. At this stage, a trunk is created between the two switches. Notice how they sy exchange: MAC 005014BB63FD is clic MAC 003019798CFD is bing 4. Clic sends a summary advertisement to bing. Bing learns the VTP domain na sample output:

!--- On bing: received vtp packet: mNo = 2 pNo = 1 VTP: i summary, domain = test, rev = 11, followers = !--- This indicates that bing has received its !--- first summary advertisement. domain change notification sent VTP: transitioning from null to test domain !--- This is where bing gets the VTP domain name. VTP: summary packet rev 11 greater than domain test VTP: domain test currently not in updating state VTP: summary packet with followers field zero ------------------FRAME 1--------------------------DLC: ----- DLC Header ----DLC: DLC: Frame 1988 arrived at 15:01:00.1223; fr DLC: Destination = Multicast 01000CCCCCCC DLC: Source = Station 005014BB63FD DLC: 802.3 length = 85 DLC: LLC: ----- LLC Header ----LLC:

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006

Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN ...

Page 11 of 34

LLC: DSAP Address = AA, DSAP IG Bit = 00 (Ind LLC: SSAP Address = AA, SSAP CR Bit = 00 (Com LLC: Unnumbered frame: UI LLC: SNAP: ----- SNAP Header ----SNAP: SNAP: Vendor ID = Cisco1 SNAP: Type = 2003 (VTP) SNAP: VTP: ----- Cisco Virtual Trunk Protocol (VTP) Packet VTP: VTP: Version = 1 VTP: Message type = 0x01 ( VTP: Number of Subset-Advert messages = 0 VTP: Length of management domain name = 4 VTP: Management domain name = "test" VTP: Number of Padding bytes = 28 VTP: Configuration revision number = 0x0000 VTP: Updater Identity IP address = 0.0.0. VTP: Update Timestamp = "93052 VTP: MD5 Digest value = 0x8576 VTP: 0x220A ---------------------------------------------------5. With trace set, bing receives a summary advertisement with no followers. The and sends advertisement requests to obtain the VLAN information, in FRAME

!--- On bing: VTP: tx vtp request, domain test, start value 0 !--- This is where the advertisement request is sent ----------------------FRAME 2----------------------DLC: ----- DLC Header ----DLC: DLC: Frame 1683 arrived at 17:38:55.9383; fr DLC: Destination = Multicast 01000CCCCCCC DLC: Source = Station 003019798CFD DLC: 802.3 length = 46 DLC: LLC: ----- LLC Header ----LLC: LLC: DSAP Address = AA, DSAP IG Bit = 00 (Ind LLC: SSAP Address = AA, SSAP CR Bit = 00 (Com LLC: Unnumbered frame: UI LLC: SNAP: ----- SNAP Header ----SNAP: SNAP: Vendor ID = Cisco1 SNAP: Type = 2003 (VTP) SNAP: VTP: ----- Cisco Virtual Trunk Protocol (VTP) Packet VTP: VTP: Version = 1 VTP: Message type = 0x03 ( VTP: Reserved VTP: Length of management domain name = 4 VTP: Management domain name = "test" VTP: Padding bytes = 28

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006

Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN ...

Page 12 of 34

VTP: Start value = 0 (all ---------------------------------------------------6. Clic sends another summary advertisement with field followers to VLAN 1. Th VLANs, in FRAME 3 in this output, follows this packet. Then bing configures a

!--- On bing: received vtp packet: mNo = 2 pNo = 1 VTP: i summary, domain = test, rev = 11, followers = !--- Bing has received its second summary advertisem VTP: domain test, current rev = 0 found for summary VTP: summary packet rev 11 greater than domain test !--- This configuration revision is higher than that VTP: domain test currently not in updating state received vtp packet: mNo = 2 pNo = 1 VTP: i subset, domain = test, rev = 11, seq = 1, len !--- Bing has received its subset advertisement. VTP: domain test, current rev = 0 found for subset p domain change notification sent vlan 1 unknown tlv change notification sent vlan 2 unknown tlv change notification sent vtp_vlan_change_notification: vlan = 2, mode = 1 (ADD,ACTIVE), mNo = 2 pNo = 1 vlan = 2 vlan 3 unknown tlv change notification sent vtp_vlan_change_notification: vlan = 3, mode = 1 (ADD,ACTIVE), mNo = 2 pNo = 1 vlan = 3 vlan 4 unknown tlv change notification sent vtp_vlan_change_notification: vlan = 4, mode = 1 (ADD,ACTIVE), mNo = 2 pNo = 1 vlan = 4 vlan 5 unknown tlv change notification sent vtp_vlan_change_notification: vlan = 5, mode = 1 (ADD,ACTIVE), mNo = 2 pNo = 1 vlan = 5 vlan 6 unknown tlv change notification sent vtp_vlan_change_notification: vlan = 6, mode = 1 (ADD,ACTIVE), mNo = 2 pNo = 1 vlan = 6 vlan 7 unknown tlv change notification sent vtp_vlan_change_notification: vlan = 7, mode = 1 (ADD,ACTIVE), mNo = 2 pNo = 1 vlan = 7 -----------------FRAME 3---------------------------DLC: ----- DLC Header ----DLC: DLC: Frame 2008 arrived at 15:01:03.9661; fr DLC: Destination = Multicast 01000CCCCCCC DLC: Source = Station 003019798CFD DLC: 802.3 length = 85 DLC: LLC: ----- LLC Header ----LLC: LLC: DSAP Address = AA, DSAP IG Bit = 00 (Ind LLC: SSAP Address = AA, SSAP CR Bit = 00 (Com LLC: Unnumbered frame: UI LLC:

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006

Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN ...

Page 13 of 34

SNAP: ----- SNAP Header ----SNAP: SNAP: Vendor ID = Cisco1 SNAP: Type = 2003 (VTP) SNAP: VTP: ----- Cisco Virtual Trunk Protocol (VTP) VTP: VTP: Version = VTP: Message type = VTP: Number of Subset-Advert messages = !--- Here are the numbers. VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: DLC: Length of management domain name Management domain name Number of Padding bytes Configuration revision number Updater Identity IP address Update Timestamp MD5 Digest value = = = = = = =

Packet 1 0x01 ( 1

4 "test" 28 0x0000 0.0.0. "93052 0x8576 0x220A

----- DLC Header ----DLC: DLC: Frame 2009 arrived at 15:01:03.9664; fr DLC: Destination = Multicast 01000CCCCCCC DLC: Source = Station 003019798CFD DLC: 802.3 length = 352 DLC: LLC: ----- LLC Header ----LLC: LLC: DSAP Address = AA, DSAP IG Bit = 00 (Ind LLC: SSAP Address = AA, SSAP CR Bit = 00 (Com LLC: Unnumbered frame: UI LLC: SNAP: ----- SNAP Header ----SNAP: SNAP: Vendor ID = Cisco1 SNAP: Type = 2003 (VTP) SNAP: VTP: ----- Cisco Virtual Trunk Protocol (VTP) Packet VTP: VTP: Version = 1 VTP: Message type = 0x02 ( VTP: Sequence number = 1 VTP: Management Domain Name length = 4 VTP: Management Domain Name = "test" VTP: Number of Padding bytes = 28 VTP: Configuration revision number = 0x0000 VTP: VTP: VLAN Information Field # 1: VTP: VLAN information field length = 20 VTP: VLAN Status = 00 (Op VTP: VLAN type = 1 (Eth VTP: Length of VLAN name = 7 VTP: ISL VLAN-id = 1 VTP: MTU size = 1500 VTP: 802.10 SAID field = 100001 VTP: VLAN Name = "defau VTP: # padding bytes in VLAN Name = 1 VTP: VTP: VLAN Information Field # 2:

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006

Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN ...

Page 14 of 34

VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP: VTP:

VLAN information field length VLAN Status VLAN type Length of VLAN name ISL VLAN-id MTU size 802.10 SAID field VLAN Name # padding bytes in VLAN Name VLAN Information Field # 3: VLAN information field length VLAN Status VLAN type Length of VLAN name ISL VLAN-id MTU size 802.10 SAID field VLAN Name # padding bytes in VLAN Name VLAN Information Field # 4: VLAN information field length VLAN Status VLAN type Length of VLAN name ISL VLAN-id MTU size 802.10 SAID field VLAN Name # padding bytes in VLAN Name VLAN Information Field # 5: VLAN information field length VLAN Status VLAN type Length of VLAN name ISL VLAN-id MTU size 802.10 SAID field VLAN Name # padding bytes in VLAN Name VLAN Information Field # 6: VLAN information field length VLAN Status VLAN type Length of VLAN name ISL VLAN-id MTU size 802.10 SAID field VLAN Name # padding bytes in VLAN Name VLAN Information Field # 7: VLAN information field length VLAN Status VLAN type Length of VLAN name ISL VLAN-id MTU size 802.10 SAID field

= = = = = = = = =

20 00 (Op 1 (Eth 8 2 1500 100002 "VLAN0 0

= = = = = = = = =

20 00 (Op 1 (Eth 8 3 1500 100003 "VLAN0 0

= = = = = = = = =

20 00 (Op 1 (Eth 8 4 1500 100004 "VLAN0 0

= = = = = = = = =

20 00 (Op 1 (Eth 8 5 1500 100005 "VLAN0 0

= = = = = = = = =

20 00 (Op 1 (Eth 8 6 1500 100006 "VLAN0 0

= = = = = = =

20 00 (Op 1 (Eth 8 7 1500 100007

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006

Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN ...

Page 15 of 34

VTP: VLAN Name = "VLAN0 VTP: # padding bytes in VLAN Name = 0 VTP: VTP: VLAN Information Field # 8: VTP: VLAN information field length = 20 VTP: VLAN Status = 00 (Op VTP: VLAN type = 1 (Eth VTP: Length of VLAN name = 8 VTP: ISL VLAN-id = 10 VTP: MTU size = 1500 VTP: 802.10 SAID field = 100010 VTP: VLAN Name = "VLAN0 VTP: # padding bytes in VLAN Name = 0 VTP: VTP: VLAN Information Field # 9: VTP: VLAN information field length = 32 VTP: VLAN Status = 00 (Op VTP: VLAN type = 2 (FDD VTP: Length of VLAN name = 12 VTP: ISL VLAN-id = 1002 VTP: MTU size = 1500 VTP: 802.10 SAID field = 101002 VTP: VLAN Name = "fddiVTP: # padding bytes in VLAN Name = 0 VTP: Reserved 8 bytes VTP: VTP: VLAN Information Field # 10: VTP: VLAN information field length = 40 VTP: VLAN Status = 00 (Op VTP: VLAN type = 3 (Tok VTP: Length of VLAN name = 18 VTP: ISL VLAN-id = 1003 VTP: MTU size = 1500 VTP: 802.10 SAID field = 101003 VTP: VLAN Name = "token VTP: # padding bytes in VLAN Name = 2 VTP: Reserved 8 bytes VTP: VTP: VLAN Information Field # 11: VTP: VLAN information field length = 36 VTP: VLAN Status = 00 (Op VTP: VLAN type = 4 (FDD VTP: Length of VLAN name = 15 VTP: ISL VLAN-id = 1004 VTP: MTU size = 1500 VTP: 802.10 SAID field = 101004 VTP: VLAN Name = "fddin VTP: # padding bytes in VLAN Name = 1 VTP: Reserved 8 bytes VTP: VTP: VLAN Information Field # 12: VTP: VLAN information field length = 36 VTP: VLAN Status = 00 (Op VTP: VLAN type = 5 (TRVTP: Length of VLAN name = 13 VTP: ISL VLAN-id = 1005 VTP: MTU size = 1500 VTP: 802.10 SAID field = 101005 VTP: VLAN Name = "trnet VTP: # padding bytes in VLAN Name = 3 VTP: Reserved 8 bytes ----------------------------------------------------

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006

Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN ...

Page 16 of 34

7. At this point, both switches are synchronized: bing (enable) show vtp domain Domain Name Domain Index VTP Ve ------------------------------- ------------ ------test 1 2 Vlan-count Max-vlan-storage Config Revision Notifica ---------- ---------------- --------------- -------12 1023 11 disabled Last Updater V2 Mode Pruning PruneEligible on V --------------- -------- -------- -----------------0.0.0.0 disabled disabled 2-1000 bing (enable) show vlan VLAN Name Status IfIn ---- -------------------------------- --------- ---1 default active 127 2 3 4 5 6 7 10 1002 1003 1004 1005 VLAN0002 VLAN0003 VLAN0004 VLAN0005 VLAN0006 VLAN0007 VLAN0010 fddi-default token-ring-default fddinet-default trnet-default active active active active active active active active active active active 132 133 134 135 136 137 138 128 131 129 130

This example shows how to verify the VTP configuration on a Catalyst 6000 t Router#show vtp status VTP Version: 2 Configuration Revision: 247 Maximum VLANs supported locally: 1005 Number of existing VLANs: 33 VTP Operating Mode: Client VTP Domain Name: Lab_Network VTP Pruning Mode: Enabled VTP V2 Mode: Disabled VTP Traps Generation: Disabled MD5 digest: 0x45 0x52 0xB6 0xFD 0x63 0xC8 0x49 0x80 Configuration last modified by 0.0.0.0 at 8-12-99 15 Router# This example shows how to display VTP statistics on a Catalyst 6000 that run Router#show vtp counters VTP statistics: Summary advertisements received: 7 Subset advertisements received: 5 Request advertisements received: 0 Summary advertisements transmitted: 997 Subset advertisements transmitted: 13

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006

Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN ...

Page 17 of 34

Request advertisements transmitted: 3 Number of config revision errors: 0 Number of config digest errors: 0 Number of V1 summary errors: 0 VTP pruning statistics: Trunk S f ---------------- ---------------- ---------------- Fa5/8 43071 42766 Join Transmitted Join Received

VTP Troubleshooting and Caveats

This section discusses some common troubleshooting situations for VTP.

Unable to See VLAN Details in the show run Command Output

Configuration changes in CatOS are written to NVRAM immediately after a change is does not save configuration changes to NVRAM unless you issue the copy running client and server systems require VTP updates from other VTP servers to be immed intervention. The VTP update requirements are met by the default CatOS operation, an alternative update operation. For this alteration, a VLAN database was introduced into Cisco IOS Software as a m for VTP clients and servers. In some versions of software, this VLAN database is in t called the vlan.dat file. You can view VTP/VLAN information that is stored in the vlan you issue the show vtp status command. VTP server/client mode switches do not save the entire VTP/VLAN configuration to t you issue the copy running-config startup-config command on these systems. Th VTP transparent. VTP transparent systems save the entire VTP/VLAN configuration you issue the copy running-config startup-config command. You can configure normal-range VLANs (2 through 1000) when the switch is in eithe you can only configure extended-range VLANs (1025 through 4094) in VTP transpar In order to display all the VLAN configurations, the VLAN ID, name, and so fo must issue the show vlan command. You can display the VTP information, the mode, domain, and so forth, with us The VLAN information and the VTP information are not displayed in the show the switch is in the VTP server/client mode. This is normal behavior of the sw Router#show run | include vlan vlan internal allocation policy ascending Router#show run | include vtp Switches that are in VTP transparent mode display the VLAN and VTP config command output because this information is also stored in the configuration te Router#show run | include vlan vlan internal allocation policy ascending vlan 1 tb-vlan1 1002 tb-vlan2 1003 vlan 20-21,50-51

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006

Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN ...

Page 18 of 34

vlan 1002 tb-vlan1 1 tb-vlan2 1003 vlan 1003 tb-vlan1 1 tb-vlan2 1002 vlan 1004 vlan 1005 Router#show run | include vtp vtp domain cisco vtp mode transparent

Catalyst Switches Do Not Exchange VTP Information

VTP allows switches to advertise VLAN information between other members of the s consistent view of the switched network across all switches. There are several reaso be exchanged. Verify these items if switches that run VTP fail to exchange VLAN information: VTP information only passes through a trunk port. Make sure that all ports tha trunks and are actually trunking. Make sure that the VLANs are active in all the devices. One of the switches must be the VTP server in a VTP domain. All VLAN chan to have them propagated to the VTP clients. The VTP domain name must match and it is case sensitive. CISCO and cisco Make sure that no password is set between the server and client. If any passw is the same on both sides. Every switch in the VTP domain must use the same VTP version. VTP V1 and in the same VTP domain. Do not enable VTP V2 unless every switch in the V Note: VTP V2 is disabled by default on VTP V2-capable switches. When you V2-capable switch in the VTP domain enables V2. You can only configure the transparent mode. Switches that operate in transparent mode drop VTP advertisements if they a that is in VTP transparent mode and uses VTP V2 propagates all VTP messa listed. However, a switch with VTP V1 only propagates VTP messages that ha that is configured on the local switch. The extended-range VLANs are not propagated. So you must configure exten network device. Note: In the future, the Catalyst 6500 Cisco IOS Software switches support V transmit extended-range VLANs. So far, VTP Version 3 is only supported on C VTP Version 3 Works section of Configuring VTP for more information on VTP The Security Association Identifier (SAID) values must be unique. SAID is a u The SAID identifies traffic that belongs to a particular VLAN. The SAID also d switched. The SAID value is 100,000 plus the VLAN number. These are two e The SAID for VLAN 8 is 100008.

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006

Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN ...

Page 19 of 34

The SAID for VLAN 4050 is 104050. Only VTP servers can update the VTP client and server configurations. The V or client configurations. But, the updates from the VTP server do not get upda a higher VTP revision number. Also, the client does not allow these updates t the client has a higher revision number than the one that the VTP server send

Catalyst Switch Automatically Changes VTP Mode from Client to Transpare

Some Catalyst Layer 2 and Layer 3 fixed configuration switches change the VTP mo transparent with this error message: %SW_VLAN-6-VTP_MODE_CHANGE: VLAN manager changing device CLIENT to TRANSPARENT. Either of these two reasons can cause the automatic VTP mode change in these swi More VLANs run on the Spanning Tree Protocol (STP) than the switch ca Catalyst L2 and L3 fixed configuration switches support a different maximum of per-VLAN spanning tree+ (PVST+). For example, the Catalyst 2940 suppo while the Catalyst 3750 supports 128 instances of STP in PVST+ mode. If mo is defined in the VTP, the VLANs that remain operate with STP disabled. If the number of instances of STP that is already in use is greater than the ma one of the VLANs and enable it on the VLAN where you want STP to run. Issu global configuration command in order to disable STP on a specific VLAN. Th id global configuration command in order to enable STP on the desired VLAN Note: Switches that do not run STP still forward the bridge protocol data units the other switches on the VLAN that have a running STP instance can break enough switches in order to break all the loops in the network. For example, a VLAN must run STP. You do not need to run STP on all switches in the VLAN minimal set of switches, a change to the network can introduce a loop into the storm. Workarounds: Reduce the number of VLANs that are configured to a number that the Configure the IEEE 802.1s Multiple STP (MSTP) on the switch in orde instance. Use switches and/or images (Enhanced Image [EI]) which support a g The switch receives more VLANs from a connected switch than the swit An automatic VTP mode change also can occur if the switch receives a VLAN contains more than a set number of VLANs. This normally happens in Catalys switches when they are connected to a VTP domain that has more VLANs tha Workarounds: Configure the allowed VLAN list on the trunk port of the connected swi VLANs that are passed to the client switch. Enable pruning on the VTP server switch.

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006

Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN ...

Page 20 of 34

Use switches and/or images (EI) which support a greater number of VL

CatOS Switch Changes to VTP Transparent Mode, VTP-4-UNSUPPORTEDC

A recent change in CatOS incorporated a protective feature that causes a CatOS sw order to prevent the possibility of a switch reset because of a watchdog timeout. This bug IDs: CSCdu32627 CSCdv77448 ( registered customers only) ( registered customers only)

How Do I Determine If My Switch Might Be Affected?

The watchdog timeout can occur if these two conditions are met: The Token Ring VLAN (1003) is translated to VLAN 1. You make a change in VLAN 1. Issue the show vlan command on the Catalyst in order to observe the Token Ring V show vlan command output: VLAN Type SAID MTU Parent RingNo BrdgNo Stp Brd ---- ----- ---------- ----- ------ ------ ------ ---- --1 enet 100001 1500 -

How Does CatOS Version 6.3(3) Protect My Switch from a Watchdog Timeo
There is a protective feature in order to prevent a watchdog timeout in this CatOS ve VTP server/client to VTP transparent mode.

How Do I Determine If My Switch Has Gone to VTP Transparent Mode in Or Timeout?

Your switch has gone to VTP transparent mode if the logging level for the VTP is rais Console> (enable) set logging level vtp 4 default You see this message when the switchover occurs: VTP-4-UNSUPPORTEDCFGRCVD:Rcvd VTP advert with unsupported trunk mod/port- VTP mode changed to transparent

What Are the Negative Effects When the Switch Goes to VTP Transparent M
1. If pruning is enabled, the trunks go down. 2. If the trunks go down and no other ports are in that VLAN, the VLAN interface Card (MSFC) goes down. If these effects occur, and this switch is in the core of your network, your network can

From Where Does the Unsupported VTP Configuration Come?

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006

Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN ...

Page 21 of 34

Any Cisco IOS Software-based switch, such as the switches in this list, can supply th A Catalyst 2900/3500XL A Cisco IOS Software Catalyst 6500 A Cisco IOS Software-based Catalyst 4000 These products translate the 1003 VLAN to VLAN 1 by default.

What Is the Solution?

The solution in CatOS-based switches enables the switches to handle this translated Cisco IOS Software-based switches is to remove this default translation and match t switches. These are the integrated fixed versions that are currently available:

Catalyst Switch

Fixed Releases
5.5(14) and later

CatOS switches

6.3(6) and later 7.2(2) and later

Catalyst 4000 (Supervisor Engine III) Catalyst 6500 (Supervisor Engine Cisco IOS Software) Catalyst 2900 and 3500XL

Not affected Cisco IOS Software Release 12.1 (8a)EX and later Cisco IOS Software Release 12.0 (5)WC3 and later

If you cannot upgrade to images that have these fixes integrated, you can modify the based switches. Use this procedure if the switch is a VTP server: goss#vlan data goss(vlan)#no vlan 1 tb-vlan1 tb-vlan2 Resetting translation bridge VLAN 1 to default Resetting translation bridge VLAN 2 to default goss(vlan)#no vlan 1003 tb-vlan1 tb-vlan2 Resetting translation bridge VLAN 1 to default Resetting translation bridge VLAN 2 to default goss(vlan)#apply APPLY completed. goss(vlan)#exit APPLY completed. Exiting.... The 1002 VLAN can be translated, but you can also remove it if you include this in yo

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006

Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN ...

Page 22 of 34

goss(vlan)#no vlan 1002 tb-vlan1 tb-vlan2 Resetting translation bridge VLAN 1 to default Resetting translation bridge VLAN 2 to default

When Exactly Does My Switch Change to VTP Transparent Mode?

Some confusion exists about when this switchover to VTP transparent mode occurs. examples of when the switchover can happen.

Example 1 These are the initial conditions: Both the Catalyst 6500 and the Catalyst 3500XL are VTP servers with number. Both servers have the same VTP domain name and the same VTP pa The Catalyst 3500XL has the translated Token Ring VLAN. You start the servers while they are disconnected. If you connect these two switches, the Catalyst 6500 goes to VTP transparen the Cisco 3500XL has a higher VTP configuration revision number than the C number. Moreover, if the switch to VTP transparent mode happens when you can reasonably assume that the change would also happen if you booted the switch was already connected. Example 2 These are the initial conditions: The Catalyst 6500 is a VTP server. The Catalyst 3500XL is a VTP client. The Catalyst 3500XL has a higher VTP configuration revision number revision number. Both switches have the same VTP domain and the same VTP passwo The Catalyst 3500XL has the translated Token Ring VLAN. You start the servers while they are disconnected. If you connect these two switches, the Catalyst 6500 goes to VTP transparen 3500XL has a lower configuration revision number than the Catalyst 6500 con

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006

Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN ...

Page 23 of 34

6500 does not switch to VTP transparent mode. If the Catalyst 3500XL has th the Catalyst 6500 does not go to VTP transparent mode. But the translation is

What Is the Quickest Way to Recover After I Notice the Translation in My N

Even if you correct the Token Ring VLAN information in one switch, such as the swit can have propagated throughout your network. You can use the show vlan comman Therefore, the quickest way to recover is to perform these steps: 1. Take a Cisco IOS Software-based switch, such as a Catalyst XL that is conne switch to a VTP server. 2. Remove the translated VLANs. 3. After you apply the change in the switch, reconnect the switch to the network. The change should be propagated to all the other VTP servers and clients. You can use the show vlan command in order to verify that the translation is should be able to change the affected CatOS 6.3(3) switch back to a VTP ser Note: The Catalyst XL switches do not support as many VLANs as the Cataly VLANs in the Catalyst 6500 exist in the Catalyst XL switch before you reconn to connect a Catalyst 3548XL with 254 VLANs and a higher VTP configuration has 500 VLANs configured.

How a Recently Inserted Switch Can Cause Network Problems

Note: See the Flash Animation: VTP section of this document in order to see a Flash This problem occurs when you have a large switched domain that is all in the same V switch in the network. This switch was previously used in the lab, and a good VTP domain name was enter client and was connected to the rest of the network. Then, you brought the ISL link u seconds, the whole network was down. What can have happened? The configuration revision number of the switch that you inserted was higher than the VTP domain. Therefore, your recently introduced switch, with almost no configured V VTP domain. This happens whether the switch is a VTP client or a VTP server. A VTP client can e You can tell that this has happened when many of the ports in your network go into i to a nonexistent VLAN.

Solution
Quickly reconfigure all of the VLANs on one of the VTP servers.

What to Remember
Always make sure that the configuration revision number of all switches that you inse configuration revision number of the switches that are already in the VTP domain. If you have the output of a show tech-support command from your Cisco device, yo ( registered customers only) in order to display potential issues and fixes.

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006

Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN ...

Page 24 of 34

Example
Complete these steps in order to see an example of this problem: 1. Issue these commands in order to see that clic has 7 VLANs (1, 2, 3, and the domain named test, and port 2/3 is in VLAN 3: clic (enable) show vlan 1993 VLAN ---1 2 3 1002 1003 1004 1005 May 25 05:09:50 %PAGP-5-PORTTOSTP:Port 2/1 Name Status -------------------------------- --------default active VLAN0002 active VLAN0003 active fddi-default active token-ring-default active fddinet-default active trnet-default active join IfIn ---65 70 71 66 69 67 68

clic (enable) show vtp domain Domain Name Domain Index VTP Ve -------------------------------- ------------ -----test 1 2 Vlan-count Max-vlan-storage Config Revision Notifica ---------- ---------------- --------------- -------7 1023 0 disabled Last Updater V2 Mode Pruning PruneEligible on V --------------- -------- -------- -----------------0.0.0.0 disabled disabled 2-1000 clic (enable) show port 2/3 Port Name Status Vlan Level ----- ------------------ ---------- ---------- ----2/3 connected 3 normal 2. Connect bing, which is a lab switch on which VLANs 4, 5, and 6 were created Note: The configuration revision number is 3 in this switch. bing (enable) show vlan VLAN Name Status IfIn ---- -------------------------------- --------- ---1 default active 4 4 5 6 1002 1003 1004 1005 VLAN0004 VLAN0005 VLAN0006 fddi-default token-ring-default fddinet-default trnet-default active active active active active active active 63 64 65 5 8 6 7

3. Place bing in the same VTP domain (test).

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006

Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN ...

Page 25 of 34

bing (enable) show vtp domain Domain Name Domain Index VTP Ve -------------------------------- ------------ -----test 1 2 Vlan-count Max-vlan-storage Config Revision Notifica ---------- ---------------- --------------- -------8 1023 3 disabled Last Updater V2 Mode Pruning PruneEligible on V --------------- -------- -------- -----------------10.200.8.38 disabled disabled 2-1000 4. Configure the trunk between the two switches in order to integrate bing in the Bing erased the clic VLAN, and now clic has VLANs 4, 5, and 6. But, clic no lo inactive. clic (enable) show vtp domain Domain Name Domain Index VTP Ve -------------------------------- ------------ -----test 1 2 Vlan-count Max-vlan-storage Config Revision Notifica ---------- ---------------- --------------- -------8 1023 3 disabled Last Updater V2 Mode Pruning PruneEligible on V --------------- -------- -------- -----------------10.200.8.38 disabled disabled 2-1000 clic (enable) clic (enable) show vlan VLAN ---1 4 5 6 1002 1003 1004 1005 Name -------------------------------default VLAN0004 VLAN0005 VLAN0006 fddi-default token-ring-default fddinet-default trnet-default Status --------active active active active active active active active IfIn ---65 72 73 74 66 69 67 68

clic (enable) show port 2/3 Port Name Status Vlan Level ----- ------------------ ---------- ---------- ----2/3 inactive 3 norma

Reset the Configuration Revision number

You can easily reset the Configuration Revision number by either of the two procedu

Reset the Configuration Revision using Domain Name

Complete these steps in order to reset the configuration revision number with the cha

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006

Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN ...

Page 26 of 34

1. Issue this command in order to see that the configuration is empty: clic (enable) show vtp domain Domain Name Domain Index VTP Ve -------------------------------- ------------ -----1 2 Vlan-count Max-vlan-storage Config Revision Notifica ---------- ---------------- --------------- -------5 1023 0 disabled Last Updater V2 Mode Pruning PruneEligible on V --------------- -------- -------- -----------------0.0.0.0 disabled disabled 2-1000 clic (enable) 2. Configure the domain name, which is test in this example, and create two VLA The configuration revision number goes up to 2: clic (enable) set vtp domain test VTP domain test modified clic (enable) set vlan 2 Vlan 2 configuration successful clic (enable) set vlan 3 Vlan 3 configuration successful clic (enable) show vtp domain Domain Name Domain Index VTP Ve -------------------------------- ------------ -----test 1 2 Vlan-count Max-vlan-storage Config Revision Notifica ---------- ---------------- --------------- -------7 1023 2 disabled Last Updater V2 Mode Pruning PruneEligible on V --------------- -------- -------- -----------------0.0.0.0 disabled disabled 2-1000 clic (enable) 3. Change the domain name from test to cisco. The configuration revision number is back to 0, and all the VLANs are still pre clic (enable) set vtp domain cisco VTP domain cisco modified clic (enable) show vtp domain Domain Name Domain Index VTP Ve -------------------------------- ------------ ------

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006

Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN ...

Page 27 of 34

cisco

Vlan-count Max-vlan-storage Config Revision Notifica ---------- ---------------- --------------- -------7 1023 0 disabled Last Updater V2 Mode Pruning PruneEligible on V --------------- -------- -------- -----------------0.0.0.0 disabled disabled 2-1000 4. Change the VTP domain name from cisco back to test. The configuration revision is 0. There is no risk that anything can be erased, a remain: clic (enable) set vtp domain test VTP domain test modified clic (enable) show vtp domain Domain Name Domain Index VTP Ve -------------------------------- ------------ -----test 1 2 Vlan-count Max-vlan-storage Config Revision Notifica ---------- ---------------- --------------- -------7 1023 0 disabled Last Updater V2 Mode Pruning PruneEligible on V --------------- -------- -------- -----------------0.0.0.0 disabled disabled 2-1000 clic (enable)

Reset the Configuration Revision using VTP mode

Complete these steps in order to reset the configuration revision number with the cha 1. Issue this command in order to see that the configuration is empty: clic (enable) show vtp domain Domain Name Domain Index VTP Ve -------------------------------- ------------ -----1 2 Vlan-count Max-vlan-storage Config Revision Notifica ---------- ---------------- --------------- -------5 1023 0 disabled Last Updater V2 Mode Pruning PruneEligible on V --------------- -------- -------- -----------------0.0.0.0 disabled disabled 2-1000 clic (enable) 2. Configure the domain name, which is test in this example, and create two VLA The configuration revision number goes up to 2:

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006

Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN ...

Page 28 of 34

clic (enable) set vtp domain test VTP domain test modified clic (enable) set vlan 2 Vlan 2 configuration successful clic (enable) set vlan 3 Vlan 3 configuration successful clic (enable) show vtp domain Domain Name Domain Index VTP Ve -------------------------------- ------------ -----test 1 2 Vlan-count Max-vlan-storage Config Revision Notifica ---------- ---------------- --------------- -------7 1023 2 disabled Last Updater V2 Mode Pruning PruneEligible on V --------------- -------- -------- -----------------0.0.0.0 disabled disabled 2-1000 clic (enable) 3. Change the VTP mode from server to transparent. The configuration revision number is back to 0, and all the VLANs are still pre clic (enable) set vtp mode transparent VTP domain test modified clic (enable) show vtp domain Domain Name Domain Index VTP Ve -------------------------------- ------------ -----test 1 2 Vlan-count Max-vlan-storage Config Revision Notifica ---------- ---------------- --------------- -------7 1023 0 disabled Last Updater V2 Mode Pruning PruneEligible on V --------------- -------- -------- -----------------0.0.0.0 disabled disabled 2-1000 4. Change the VTP mode from transparent to server or client. The configuration revision is 0. There is no risk that anything can be erased, a remain: clic (enable) set vtp mode server VTP domain test modified clic (enable) show vtp domain

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006

Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN ...

Page 29 of 34

Domain Name Domain Index VTP Ve -------------------------------- ------------ -----test 1 2 Vlan-count Max-vlan-storage Config Revision Notifica ---------- ---------------- --------------- -------7 1023 0 disabled Last Updater V2 Mode Pruning PruneEligible on V --------------- -------- -------- -----------------0.0.0.0 disabled disabled 2-1000 clic (enable)

All Ports Inactive After Power Cycle

Switch ports move to the inactive state when they are members of VLANs that do no issue is that all the ports move to this inactive state after a power cycle. Generally, yo as a VTP client with the uplink trunk port on a VLAN other than VLAN 1. Because the switch resets, it loses its VLAN database and causes the uplink port and any other p go into inactive mode. Complete these steps in order to solve this problem: 1. Temporarily change the VTP mode to transparent. switch (enable) set vtp mode transparent VTP domain austinlab modified switch (enable) 2. Add the VLAN to which the uplink port is assigned to the VLAN database. Note: This example assumes that VLAN 3 is the VLAN that is assigned to the switch (enable) set vlan 3 VTP advertisements transmitting temporarily stopped, and will resume after the command finishes. Vlan 3 configuration successful switch (enable) 3. Change the VTP mode back to client after the uplink port begins forwarding. switch (enable) set vtp mode client VTP domain austinlab modified After you complete these steps, VTP should repopulate the VLAN database from the ports that were members of VLANs that the VTP server advertised back into the activ

Trunk Down, Which Causes VTP Problems

Remember that VTP packets are carried on VLAN 1, but only on trunks (ISL, dot1q, If you make VLAN changes during a time when you have a trunk down or when LAN of your network, you can lose your VLAN configuration. When the trunk connectivity resynchronize. Therefore, the switch with the highest configuration revision number e lowest configuration revision switch.

VTP and STP (Logical Spanning Tree Port)

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006

Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN ...

Page 30 of 34

When you have a large VTP domain, you also have a large STP domain. VLAN 1 mu Therefore, one unique STP is run for that VLAN in the whole domain. When VTP is used and a new VLAN is created, the VLAN is propagated through the created in all switches in the VTP domain. All Cisco switches use PVST, which mean for each VLAN. This adds to the CPU load of the switch. You must refer to the maxim that are supported on the switch in order to have an idea of the number of STPs that number of logical ports is roughly the number of ports that run STP. Note: A trunk port runs one instance of STP for each active VLAN on the trunk. You can perform a rapid evaluation of this value for your switch with this formula: (Number of active VLANs x Number of trunks) + Number of a This number, the maximum number of logical ports for STP, varies from switch to sw notes for each product. For example, on a Catalyst 5000 with a Supervisor Engine 2 instances. Each time you create a new VLAN with VTP, the VLAN is propagated by d active on all ports. You might need to prune unnecessary VLANs from the trunk in or logical ports. Note: Pruning unnecessary VLANs from the trunk can be done with one of two meth Manual pruning of the unnecessary VLAN on the trunkThis is the best m spanning tree. Instead, the method runs the pruned VLAN on trunks. The VTP describes manual pruning further. VTP pruningAvoid this method if the goal is to reduce the number of STP i are still part of the spanning tree. Therefore, VTP-pruned VLANs do not reduc instances.

VTP Pruning
VTP pruning increases the available bandwidth. VTP pruning restricts flooded traffic use in order to access the appropriate network devices. By default, VTP pruning is d on a VTP server enables pruning for the entire management domain. The set vtp pr automatically and stops the inefficient flooding of frames where the frames are not ne are pruning eligible. VTP pruning does not prune traffic from pruning-ineligible VLAN traffic from VLAN 1 cannot be pruned. Note: Unlike manual VLAN pruning, automatic pruning does not limit the spanning tr All devices in the management domain must support VTP pruning in order for VTP p not support VTP pruning, you must manually configure the VLANs that are allowed o pruning of the VLAN from the trunk with the clear trunk mod/port command and the example, you can choose to only allow, on each trunk, a core switch to the VLANs th reduce the load on the CPUs of all switches (core switches and access switches) an that extend through the entire network. This pruning limits STP problems in the VLAN This is an example: TopologyThe topology is two core switches that are connected to each oth different access switches. With this design, each core switch has 81 trunks, a trunks. This assumes that access switches have, in addition to the two uplinks 1900. This is a total of four to five trunks per access switch. PlatformCore switches are Catalyst 6500s with Supervisor Engine 1A and software release 5.5(7). According to the Release Notes for Catalyst 6000/65

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006

Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN ...

Page 31 of 34

cannot have more than 4000 STP logical ports. Access switchesAccess switches are either: Catalyst 5000 switches with Supervisor Engine 2, which do not suppor Catalyst 5000 switches with Supervisor Engine 1 and 20 MB of DRAM STP logical ports Number of VLANsRemember to use VTP. A VLAN on the VTP server is cr you have 100 VLANs, the core must handle roughly 100 VLANs x 81 trunks = limit. The access switch must handle 100 VLANs x 5 trunks = 500 logical port exceed the supported number of logical ports, and access switches with Supe SolutionIf you assume that only four or five VLANs are actually needed in e other VLANs from the trunk on the core layer. For example, if only VLANs 1, 1 that goes to that access switch, the configuration on the core is: Praha> (enable) set trunk 1/1 des Port(s) 1/1 trunk mode set to desirable. Praha> (enable) clear trunk 1/1 2-9,12,14-1005 Removing Vlan(s) 2-9,12,14-1005 from allowed list. Port 1/1 allowed vlans modified to 1,10,11,13. Praha> (enable) clear trunk 1/1 2-9,12,14-1005 Note: Even if you do not exceed the number of allowed logical ports, prune V STP loop in one VLAN only extends where the VLAN is allowed and does not broadcast in one VLAN does not reach the switch that does not need the broa software release 5.4, you cannot clear VLAN 1 from trunks. In later releases, command: Praha> (enable) clear trunk 1/1 1 Default vlan 1 cannot be cleared from module 1. The Case of VLAN 1 section of this document discusses techniques on how t campus.

The Case of VLAN 1

You cannot apply VTP pruning to VLANs that need to exist everywhere and that nee campus, in order to be able to carry VTP, Cisco Discovery Protocol [CDP] traffic, and to limit the extent of VLAN 1. The feature is called VLAN 1 disable on trunk. The feat 5500/5000, and 6500/6000 series switches in CatOS software release 5.4(x) and late 1 from a trunk, as you do for any other VLAN. This pruning does not include all the c on the trunk (DTP, PAgP, CDP, VTP, and others). But, the pruning does block all use you can keep the VLAN from spanning the entire campus. STP loops are limited in e to be disabled, as you would configure other VLANs to be cleared from the trunk: Console> (enable) set trunk 2/1 desirable Port(s) 2/1 trunk mode set to desirable.

Console> (enable) clear trunk 2/1 1

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006

Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN ...

Page 32 of 34

Removing Vlan(s) 1 from allowed list. Port 2/1 allowed vlans modified to 2-1005.

Troubleshoot VTP Configuration Revision Number Errors That Are Seen in Output
VTP is designed for an administrative environment in which the VLAN database for t at any one time. It assumes that the new revision propagates throughout the domain change the database simultaneously on two different devices in the administrative do databases to be generated with the same revision number. These databases propag until they meet at an intermediate Catalyst switch on the network. This switch cannot packets have the same revision number but a different MD5 value. When the switch increments the No of config revision errors counter. Note: The show vtp statistics command output in this section provides an example If you find that the VLAN information is not updated on a certain switch, or if you enc show vtp statistics command. Determine if the count of VTP packets with configura Console> (enable) show vtp statistics VTP statistics: summary advts received 4690 subset advts received 7 request advts received 0 summary advts transmitted 4397 subset advts transmitted 8 request advts transmitted 0 No of config revision errors 5 No of config digest errors 0 VTP pruning statistics: Trunk Join Transmitted Join Received -------- --------------1/1 0 1/2 0 Console> (enable) ------------0 0

Summary advts non-pruning-cap --------------0 0

If you observe a configuration revision error, you can resolve this problem if you chan that a VTP database with a higher revision number than the revision number of the c example, on the switch that acts as the primary VTP server, add or delete a false VL updated revision is propagated throughout the domain and overwrites the database a domain advertise an identical database, the error no longer appears.

Troubleshoot VTP Configuration Digest Errors That Are Seen in the show v
This section addresses how to troubleshoot VTP configuration digest errors that you statistics command. This is an example: Console> (enable) show vtp statistics VTP statistics: summary advts received subset advts received request advts received summary advts transmitted subset advts transmitted request advts transmitted No of config revision errors

3240 4 0 3190 5 0 0

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006

Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN ...

Page 33 of 34

No of config digest errors VTP pruning statistics: Trunk Join Transmitted -------- --------------1/1 0 1/2 0 Console> (enable)

2 Join Received ------------0 0 Summary advts non-pruning-ca --------------0 0

The general purpose of an MD5 value is to verify the integrity of a received packet an corruption of the packet during transit. When a switch detects a new revision number value, the switch sends a request message to the VTP server and requests the VTP contains a list of VLAN information. The switch calculates the MD5 value for the subs value to the MD5 value of the VTP summary advertisement. If the two values are diff config digest errors counter. A common reason for these digest errors is that the VTP password is not configured VTP domain. Troubleshoot these errors as a misconfiguration or data corruption issu When you troubleshoot this problem, ensure that the error counter is not historical. T most recent device reset or the VTP statistics reset.

Conclusion
There are some disadvantages to the use of VTP. You must balance the ease of VT of a large STP domain and the potential instability and risks of STP. The greatest ris campus. When you use VTP, there are two things to which you must pay close atten Remember the configuration revision and how to reset it each time that you in you do not bring down the entire network. Avoid as much as possible to have a VLAN that spans the entire network.

NetPro Discussion Forums - Featured Conversations

Networking Professionals Connection is a forum for networking professionals to shar information about networking solutions, products, and technologies. The featured link conversations available in this technology. NetPro Discussion Forums - Featured Conversations for LAN Network Infrastructure: LAN Routing and Switching Inserting 2 different kind of power supply in single 6509 chassi - Oct 14, 2006 1841 Compact Flash Replacement - Oct 14, 2006 PRE-STD BPDUs - Oct 13, 2006 input errors keep increasing - Oct 13, 2006 Network Problem - Oct 13, 2006 Network Infrastructure: Getting Started with LANs SOHO 91 QUESTIONS - Oct 14, 2006 console cable for catalyst 5500 - Oct 13, 2006 port forwarding - Oct 13, 2006 Migration from Cat6509 to Cat6513 - Oct 12, 2006 I am new to cisco and need some help - Oct 12, 2006

Related Information
LAN Product Support Pages

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006

Understanding and Configuring VLAN Trunk Protocol (VTP) [Virtual LANs/VLAN ...

Page 34 of 34

LAN Switching Support Page Technical Support & Documentation - Cisco Systems

Updated: Sep 25, 2006

Contacts & Feedback | Help | Site Map 1992-2006 Cisco Systems, Inc. All rights reserved. Terms & Conditions | Privacy Statement | Cookie Policy | Trademarks of Cisco Systems, Inc.

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c5... 10/14/2006