VLANs

CCNA Routing and Switching

Routing and Switching Essentials v6.0

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 1
 Chapter 2.2: VLANs

Routing and Switching Essentials v6.0

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 2
 Chapter 3 - Sections & Objectives
VLAN Segmentation
• Explain the purpose of VLANs in a switched network.
• Explain how a switch forwards frames based on VLAN configuration in a multi-
switch environment.
VLAN Implementations
• Configure a switch port to be assigned to a VLAN based on requirements.
• Configure a trunk port on a LAN switch.
• Troubleshoot VLAN and trunk configurations in a switched network.
Inter-VLAN Routing Using Routers
• Describe the two options for configuring Inter-VLAN routing.
• Configure Legacy Inter-VLAN Routing.
• Configure Router-on-a-Stick Inter-VLAN Routing

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 3
 VLAN Segmentation

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 4
Overview of VLANs
VLAN Definitions

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 5
Overview of VLANs
VLAN Definitions (cont.)
▪ VLANs allow an administrator to segment networks based on factors such
as function, project team, or application, without regard for the physical
location of the user or device.
▪ VLANs enable the implementation of access and security policies
according to specific groupings of users.
▪ A VLAN is a logical partition of a Layer 2 network.
▪ Multiple partitions can be created, allowing for multiple VLANs to co-exist.
▪ Each VLAN is a broadcast domain, usually with its own IP network.
▪ VLANs are mutually isolated, and packets can only pass between them
via a router.
▪ The partitioning of the Layer 2 network takes place inside a Layer 2
device, usually via a switch.
▪ The hosts grouped within a VLAN are unaware of the VLAN’s existence.

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 6
Overview of VLANs
Benefits of VLANs

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 7
Overview of VLANs
Types of VLANs
▪ Data VLAN – user generated traffic
▪ Default VLAN – all switch ports become part of this VLAN until switch is
configured, show vlan brief
▪ Native VLAN – used for untagged traffic
▪ Management VLAN – used to access management capabilities

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 8
Overview of VLANs
Types of VLANs (cont.)

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 9
Overview of VLANs
Voice VLANs

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 10
Overview of VLANs
Voice VLANs (cont.)
▪ VoIP traffic is time-sensitive and requires: (VLAN 150)
• Assured bandwidth to ensure voice quality.
• Transmission priority over other types of network traffic.
• Ability to be routed around congested areas on the network.
• Delay of less than 150 ms across the network.
▪ The voice VLAN feature enables access ports to carry IP voice traffic from
an IP phone.

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 11
VLANs in a Multi-Switched Environment
VLAN Trunks

The links between switches S1 and S2, and S1 and S3 are configured to
transmit traffic coming from VLANs 10, 20, 30, and 99 across the network.
This network could not function without VLAN trunks.

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 12
VLANs in a Multi-Switched Environment
VLAN Trunks (cont.)
▪ A VLAN trunk is a point-to-point link that carries more than one VLAN.
▪ A VLAN trunk is usually established between switches so same-VLAN
devices can communicate, even if physically connected to different
switches.
▪ A VLAN trunk is not associated to any VLANs; neither is the trunk ports
used to establish the trunk link.
▪ Cisco IOS supports IEEE802.1q, a popular VLAN trunk protocol.

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 13
VLANs in a Multi-Switched Environment
Controlling Broadcast Domains with VLANs

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 14
VLANs in a Multi-Switched Environment
Controlling Broadcast Domains with VLANs

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 15
VLANs in a Multi-Switched Environment
Controlling Broadcast Domains with VLANs
▪ VLANs can be used to limit the reach of broadcast frames.
▪ A VLAN is a broadcast domain of its own.
▪ A broadcast frame sent by a device in a specific VLAN is forwarded within
that VLAN only.
▪ VLANs help control the reach of broadcast frames and their impact in the
network.
▪ Unicast and multicast frames are forwarded within the originating VLAN.

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 16
 VLANs in a Multi-Switched Environment
Tagging Ethernet Frames for VLAN
Identification
▪ Frame tagging is the process of adding a VLAN identification header to
the frame.
▪ It is used to properly transmit multiple VLAN frames through a trunk link.
▪ Switches tag frames to identify the VLAN to which they belong.
▪ Different tagging protocols exist; IEEE 802.1Q is a vey popular example.
▪ The protocol defines the structure of the tagging header added to the
frame.
▪ Switches add VLAN tags to the frames before placing them into trunk
links and remove the tags before forwarding frames through non-trunk
ports.
▪ When properly tagged, the frames can transverse any number of switches
via trunk links and still be forwarded within the correct VLAN at the
destination.
Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 17
 VLANs in a Multi-Switched Environment
Tagging Ethernet Frames for VLAN
Identification (cont.)

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 18
 VLANs in a Multi-Switched Environment
Native VLANs and 802.1Q Tagging

▪ Control traffic sent on the native VLAN should not be tagged.

▪ Frames received untagged, remain untagged and are placed in the native
VLAN when forwarded.
▪ If there are no ports associated to the native VLAN and no other trunk
links, an untagged frame is dropped.
▪ When configuring a switch port on a Cisco switch, configure devices so
that they do not send tagged frames on the native VLAN.
▪ In Cisco switches, the native VLAN is VLAN 1, by default.

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 19
 VLANs in a Multi-Switched Environment
Voice VLAN Tagging

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 20
 VLANs in a Multi-Switched Environment
Activity – Predict Switch Behavior

Scenario 1: PC 1 sends a broadcast.

Scenario 2: PC 2 sends a broadcast.
Scenario 3: PC 3 sends a broadcast.

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 21
 VLAN Implementations

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 22
VLAN Assignment
VLAN Ranges on Catalyst Switches
▪ Cisco Catalyst 2960 and 3560 Series switches support over 4,000
VLANs.
▪ VLANs are split into two categories:
• Normal range VLANs
• VLAN numbers from 1 to 1,005
• Configurations stored in the vlan.dat (in the flash memory)
• IDs 1002 through 1005 are reserved for Token Ring and Fiber
Distributed Data Interface (FDDI) VLANs, automatically created
and cannot be removed
• Extended Range VLANs
• VLAN numbers from 1,006 to 4,096
• Configurations stored in the running configuration (NVRAM)
• VLAN Trunking Protocol (VTP) does not learn extended VLANs

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 23
VLAN Assignment
VLAN Ranges on Catalyst Switches (cont.)
▪ Normal Range VLANs

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 24
VLAN Assignment
Creating a VLAN

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 25
VLAN Assignment
Assigning Ports to VLANs

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 26
VLAN Assignment
Assigning Ports to VLANs

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 27
VLAN Assignment
Changing VLAN Port Membership
▪ Remove VLAN Assignment

▪ Interface F0/18 was previously assigned to VLAN 20 which is still active, F0/18
reset to VLAN1

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 28
VLAN Assignment
Changing VLAN Port Membership (cont.)

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 29
VLAN Assignment
Changing VLAN Port Membership (cont.)

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 30
VLAN Assignment
Deleting VLANs

▪ The entire vlan.dat file can be deleted using the delete flash:vlan.dat
privileged EXEC mode command
▪ Abbreviated command version (delete vlan.dat) can be used if the
vlan.dat file has not been moved from its default location
Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 31
VLAN Assignment
Verifying VLAN Information

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 32
VLAN Assignment
Verifying VLAN Information (cont.)

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 33
VLAN Trunks
Configuring IEEE 802.1q Trunk Links

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 34
VLAN Assignment
Configuring IEEE 802.1q Trunk Links (cont.)

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 35
VLAN Trunks
Resetting the Trunk to Default State

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 36
VLAN Trunks
Resetting the Trunk to Default State (cont.)

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 37
VLAN Trunks
Verifying Trunk Configuration

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 38
Troubleshoot VLANs and Trunks
IP Addressing Issues with VLANs
▪ It is a common practice to associate a VLAN with an IP network.
▪ Because different IP networks only communicate through a router, all
devices within a VLAN must be part of the same IP network to
communicate.
▪ The figure displays that PC1 cannot communicate to the server because
it has a wrong IP address configured.

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 39
Troubleshoot VLANs and Trunks
Missing VLANs
▪ If all the IP address mismatches have been solved, but the device still
cannot connect, check if the VLAN exists in the switch.

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 40
Troubleshoot VLANs and Trunks
Missing VLANs (cont.)
▪ If the VLAN to which a port belongs is deleted, the port becomes inactive. All ports
belonging to the VLAN that was deleted are unable to communicate with the rest of the
network.
▪ Not functional until the missing VLAN is created using the vlan vlan_id global
configuration.

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 41
Troubleshoot VLANs and Trunks
Introduction to Troubleshooting Trunks

Note: To solve a native

VLAN mismatch,
configure the native
VLAN to be the same
VLAN on both sides of
the link.

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 42
Troubleshoot VLANs and Trunks
Common Problems with Trunks
▪ Trunking issues are usually associated with incorrect configurations.
▪ The most common type of trunk configuration errors are:
▪ Native VLAN mismatches
▪ Trunk mode mismatches
▪ Allowed VLANs on trunks
▪ If a trunk problem is detected, the best practice guidelines
recommend to troubleshoot in the order shown above.

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 43
Troubleshoot VLANs and Trunks
Common Problems with Trunks (cont.)

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 44
Troubleshoot VLANs and Trunks
Incorrect Port Mode

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 45
Troubleshoot VLANs and Trunks
Incorrect VLAN List

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 46
Troubleshoot VLANs and Trunks
Incorrect VLAN List (cont.)
▪ VLANs must be allowed in the trunk before their frames can be
transmitted across the link.
▪ Use the switchport trunk allowed vlan command to specify which
VLANs are allowed in a trunk link.
▪ Use the show interfaces trunk command to ensure the correct
VLANs are permitted in a trunk.

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 47
Chapter Summary
Summary
• Explain the purpose of VLANs in a switched network.
• Explain how a switch forwards frames based on VLAN configuration in a multi-switch
environment.
• Configure a switch port to be assigned to a VLAN based on requirements.
• Configure a trunk port on a LAN switch.
• Troubleshoot VLAN and trunk configurations in a switched network.
• Describe the two options for configuring inter-VLAN routing.
• Configure Legacy Inter-VLAN Routing.
• Configure Router-on-a-Stick Inter-VLAN Routing

Presentation_ID © 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential 48