Sunday, September 19, 2021

VTP - questions and tips.

Hi all. So I just started at a major company which have several big sites. On average its about 60 switches per site and about 500 sites geografically (big tech company).

I've been tasked with a "LAN-upgrade" of several of these sites, and when I check configuration I see some VTP configuration. To be honest, I don't remember much of it (other than from school) and CBT Nuggets (with Jeremy Cioara), but I just wanted to confirm some statements then then how I should go about it.

So from what I understand is this (you can just answer yes/no on these statements);

  1. The highest VTP revision number gets to be the master for the database, EVEN, if the VTP mode is in client mode. So say for example you got a couple of core switches which are the servers, but then you go and get an old switch with a higher revision number, and even if this one is in client mode, those VLANS will be the only ones in that VTP domain.
  2. VTP server is the default mode.
  3. All switches start with revision 0.
  4. VTP revision number remains even if the configuration is reset (side question; how do you remove the VTP revision number?).
  5. There are three VTP modes;Server: Server can change VLAN information (such as add/delete). Server sends and recieve VTP updates. The server saves the VLAN configuration.Client: Cannot change VLAN information. If you try to configure a VLAN, you get a error message saying you cant. It send and recieve VTP updates, but it does not save the VLAN configuration.Transparent: Can change VLAN informarion (like adding a VLAN). It does not listen to VTP advertisements. It saves the VLAN configuration.
  6. There is not way to turn off VTP. But its essentially what the VTP mode transparent command does, even though it passes VTP updates.

And my questions are:

  1. Can you actually turn of VTP?
  2. Does Cisco recomment to have VTP turned off?
  3. Is there any verison of VTP that is considered "safe"?
  4. If your enviroment was quite static, in other words, not so many VLANs is introduced, but the burden is more to add/remove port is different VLANS, would you bother with VTP?
  5. What differs VTP v.1/VTP v.2 and VTP v.3? Does all of them require domain-name and password to pass VLAN configuration?

And my last thing I want your input is this:

I'm going to add a new switch to a network where almost every switch is in VTP transparent mode. Is there anyway I can mess this up, if I also put my switch in VTP transparent mode? The old switches are mainly 2960 and the new switch is a 9320 (which supports VTP v.3, but the old switches does not support that, from what I understand.

So even if the switch were to have a higher revision number, the fact that its transparent, makes it safe to use. I also noted that the VTP transparent configuration show in the show run output.

If you got other tips or tricks to share with me, I'd be happy to hear them. VTP was always something I heard wasn't widly used, and since I only worked with Extreme Network for 5+ years, I don't have much knowledge about VTP.

Thanks a lot of your help and input is this.



No comments:

Post a Comment