Chapter 3 - VLANS

CCNA Exploration 4.0

Objectives

Explain the role of VLANs in a network. Explain the role of trunking VLANs in a network. p g Explain the role of trunking VLANs in a network. Troubleshoot the common software or hardware configuration problems associated with VLANs on switches in a network topology.

Hc vin mng Bach Khoa - Website: www.bkacad.com

Role of VLANS

One of the contributing technologies to excellent network performance is the separation of large broadcast domains into smaller ones with VLANs. Smaller broadcast domains limit the number of devices participating in broadcasts and allow devices to be separated into functional groupings, such as database services for an accounting department and high-speed data t d t transfer for an engineering department. f f i i d t t

Hc vin mng Bach Khoa - Website: www.bkacad.com

Before VLANS

1 building Many building

1 building -> OK Many building -> NOT OK y g IT department wants to ensure that student computers all share the same security features and bandwidth controls. How can the network accommodate the shared needs of the geographically separated departments? Do you create a large LAN and wire each department together? It would be great to group the people with the resources they use regardless of their geographic location, and it would make it easier to manage their specific security and bandwidth needs needs.

Hc vin mng Bach Khoa - Website: www.bkacad.com

VLAN overview

A VLAN allows a network administrator to create groups of logically networked devices that act as if they are on their own independent network These VLANs allow the network administrator to implement access and security policies to particular groups of users.
Hc vin mng Bach Khoa - Website: www.bkacad.com 5

VLANS details

A VLAN is a broadcast domain created by one or more switches. The network design above creates three separate broadcast d b d t domains. i
Hc vin mng Bach Khoa - Website: www.bkacad.com 6

Without VLANs No Broadcast Control

ARP Request

172.30.1.21 255.255.255.0

Switch 1

172.30.2.12 255.255.255.0

172.30.2.10 255.255.255.0 255 255 255 0

172.30.1.23 255.255.255.0 255 255 255 0

No VLANs Same as a single VLAN Two Subnets

Without VLANs, the ARP Request would be seen by all hosts. Again, Again consuming unnecessary network bandwidth and host processing cycles.
Hc vin mng Bach Khoa - Website: www.bkacad.com 7

With VLANs Broadcast Control

Switch Port: VLAN ID
ARP Request

172.30.1.21 255.255.255.0 VLAN 1

Switch 1

172.30.2.12 255.255.255.0 VLAN 2

172.30.2.10 255.255.255.0 255 255 255 0 VLAN 2

172.30.1.23 255.255.255.0 255 255 255 0 VLAN 1

1 2 3 4 5 6 . Port 1 2 1 2 2 1 . VLAN

Two VLANs Two Subnets

Hc vin mng Bach Khoa - Website: www.bkacad.com

Benefit of VLANS

Hc vin mng Bach Khoa - Website: www.bkacad.com

VLAN ID

Hc vin mng Bach Khoa - Website: www.bkacad.com

10

VLAN Tagging
No VLAN Tagging

VLAN Tagging

VLAN Tagging is used when a link needs to carry traffic for more than one VLAN.

Hc vin mng Bach Khoa - Website: www.bkacad.com

11

VLAN Tagging

802.10

There are two major methods of frame tagging Cisco proprietary Inter tagging, InterSwitch Link (ISL) and IEEE 802.1Q. ISL used to be the most common, but is now being replaced by 802.1Q gg g frame tagging. Cisco recommends using 802.1Q. VLAN Tagging and Trunking will be discussed in the next chapter.
Hc vin mng Bach Khoa - Website: www.bkacad.com 12

Hc vin mng Bach Khoa - Website: www.bkacad.com

13

Types of VLAN

Data VLAN: A data VLAN is a VLAN that is configured to carry only user-generated traffic.

Hc vin mng Bach Khoa - Website: www.bkacad.com

14

Types of VLAN

Default VLAN: All switch ports become a member of the default VLAN after the initial boot up of the switch. H i all th switch ports participate i th d f lt VLAN makes Having ll the it h t ti i t in the default k them all part of the same broadcast domain. This allows any device connected to any switch port to communicate with other devices on other switch ports. The default VLAN for Cisco switches is VLAN 1. VLAN 1 has all the features of any VLAN, except that you cannot rename it and you can not delete it.
Hc vin mng Bach Khoa - Website: www.bkacad.com 15

Types of VLAN

Management VLAN: A management VLAN is any VLAN you configure to access the management capabilities of a switch switch. VLAN 1 would serve as the management VLAN if you did not proactively define a unique VLAN to serve as the management VLAN. VLAN You assign the management VLAN an IP address and subnet mask. A switch can be managed via HTTP, Telnet, SSH, or SNMP.
Hc vin mng Bach Khoa - Website: www.bkacad.com 16

Types of VLAN

Native VLAN: A native VLAN is assigned to an 802.1Q trunk port. A 802 1Q trunk port supports traffic coming f An 802.1Q t k t t t ffi i from many VLANs (tagged traffic) as well as traffic that does not come from a VLAN (untagged traffic). The 802.1Q trunk port places untagged traffic on the native VLAN. In the figure, the native VLAN is VLAN 99.
Hc vin mng Bach Khoa - Website: www.bkacad.com 17

Types of VLAN

Voice VLAN: It is easy to appreciate why a separate VLAN is needed to support ( ) Voice over IP (VoIP) VoIP traffic requires: Assured bandwidth to ensure voice quality Transmission priority over other types of network traffic Ability to be routed around congested areas on the network Delay of less than 150 milliseconds (ms) across the network

Hc vin mng Bach Khoa - Website: www.bkacad.com

18

Voice VLAN

Hc vin mng Bach Khoa - Website: www.bkacad.com

19

Types of traffic

Hc vin mng Bach Khoa - Website: www.bkacad.com

20

Types of traffic

Hc vin mng Bach Khoa - Website: www.bkacad.com

21

Types of traffic

Hc vin mng Bach Khoa - Website: www.bkacad.com

22

Types of traffic

Hc vin mng Bach Khoa - Website: www.bkacad.com

23

Switch port membership

Hc vin mng Bach Khoa - Website: www.bkacad.com

24

VLAN Trunk

Hc vin mng Bach Khoa - Website: www.bkacad.com

25

802.1Q tagging

EtherType field Set to the hexadecimal value of 0x8100. This value is called the tag p g protocol ID ( (TPID) value. With the ) EtherType field set to the TPID value, the switch receiving the frame knows to look for information in the tag control information field.

Tag control information field 3 bits of user priority - Used by the 802.1p standard, which specifies how to provide expedited transmission of Layer 2 frames. A description of the IEEE 802.1p is beyond the scope of this course; however, you learned a little about it earlier in the discussion on voice VLANs VLANs. 1 bit of Canonical Format Identifier (CFI) - Enables Token Ring frames to be carried across Ethernet links easily. 12 bits of VLAN ID (VID) - VLAN identification numbers; supports up to 4096 VLAN IDs. FCS field
Hc vin mng Bach Khoa - Website: www.bkacad.com 26

Native Vlan and 802.1q

Hc vin mng Bach Khoa - Website: www.bkacad.com

27

Trunking mode

The trunking modes available in Fast Ethernet and Gigabit Ethernet

switchport mode trunk

switchport mode access switchport mode dynamic desirable

switchport mode dynamic auto

Nonegotiate

switchport nonegotiate
Hc vin mng Bach Khoa - Website: www.bkacad.com 28

Trunking mode

Hc vin mng Bach Khoa - Website: www.bkacad.com

29

Configure VLAN and Trunking

Add VLAN

Hc vin mng Bach Khoa - Website: www.bkacad.com

30

Assign VLAN to port

Hc vin mng Bach Khoa - Website: www.bkacad.com

31

Configuring Ranges of VLANs

vlan 3

SydneySwitch(config)#interface range fastethernet 0/8 - 12 SydneySwitch(config-if)#switchport access vlan 3 SydneySwitch(config-if)#exit

Hc vin mng Bach Khoa - Website: www.bkacad.com

32

Verify VLAN

Show vlan Show vlan brief Show interface vlan 2 Show interface fa0/18 switchport

Hc vin mng Bach Khoa - Website: www.bkacad.com

33

Delete Vlan

No vlan Delete flash:vlan.dat

Hc vin mng Bach Khoa - Website: www.bkacad.com

34

Configure Trunk link

Hc vin mng Bach Khoa - Website: www.bkacad.com

35

Common Problem

Hc vin mng Bach Khoa - Website: www.bkacad.com

36

Naitve VLAN mismatch

Hc vin mng Bach Khoa - Website: www.bkacad.com

37

Trunk mode mismatch

Both side is configured : switchport mode dynamic auto -> access Solution: switchport mode trunk

Hc vin mng Bach Khoa - Website: www.bkacad.com

38

Incorrect VLAN list

S1 F0/3: allow vlan 10, 99 S3 F0/3: allow vlan 10, 20, 99 Solution: S1 f0/3: switchport trunk allowed vlan 10, 20, 99

Hc vin mng Bach Khoa - Website: www.bkacad.com

39

Mistake of VLAN and IP subnets

Hc vin mng Bach Khoa - Website: www.bkacad.com

40

Summary

Hc vin mng Bach Khoa - Website: www.bkacad.com

41