3 - Implementing VLANs and STP Flashcards
What is a VLAN?
A separate broadcast domain, virtually created on the switch
How do VLANs improve security and host performance?
Fewer hosts see copies of frames (broadcasts, multicasts, unknown unicasts) sent by one host, because it creates smaller broadcast domains. Allow per VLAN security policies
When do you need VLAN trunking and what does it do?
Networks with multiple interconnected switches. Allows traffic for multiple VLANs to be sent over a single link
What is a VLAN tag?
A small header added to an Ethernet frame so that frames can be identified as belonging to a given VLAN
What are the two trunking protocols Cisco primarily supports and which is more popular?
Inter-Switch Link (ISL)
IEEE 802.1Q is more popular
How do ISL and IEEE 802.1Q differ?
802.1Q inserts an extra 4 byte VLAN header into the original frame’s Ethernet header (that also contains the VLAN ID)
How many bits is the VLAN ID inside the 802.1Q header?
12 bits
What is the max number of VLANs supported by ISL and 802.1Q?
4096 but only 4094 usable. 0 and 4095 are reserved.
What number VLANs are in the standard range?
1 - 1005
What number VLANs are in the extended range?
1006 - 4094
What is the default native VLAN?
1
What does 802.1Q do with frames in the native VLAN?
Nothing. It does not add a header
What are non-trunking interfaces called?
Access interfaces / static access interfaces
What commands would you use to setup a VLAN and add a port to it on a switch?
vlan 10 name TestVLAN interface f0/10 switchport access vlan 10 switchport mode access
How could you list simple VLAN information on a switch?
show vlan brief
What is special about VLANs 1002-1005?
They cannot be deleted
How can you disable VTP on a Switch?
vtp mode transparent
vtp mode off
What does VTP transparent mode do?
Prevent VTP from learning and advertising about VLAN configuration itself, but still forwards VTP advertisements
How can you check VTP status?
show vtp status
True / False: The show running-config command shows VLAN commands
False
What is DTP for?
Dynamic Trunking Protocol. Two connected switches use this protocol to negotiate which type of trunking to use (ISL or 802.1Q)
How does the dynamic desirable Trunk administrative mode work?
Initiates negotiation messages and responds to negotiation messages to trunk
How does the dynamic auto Trunk administrative mode work?
Passively waits to receive trunk negotiation messages at which point the switch will respond and negotiate
What is the operational mode of an interface?
The mode that it is currently actually active on an interface, e.g. static access
What is the default administrative trunking mode on an interface?
dynamic auto
What command would you use to show all interfaces that are trunking?
show interfaces trunk
How could you show information for a specific VLAN?
show vlan id 2
What happens when one end of a link has its trunking administrative mode set to trunk and the other to access?
This causes problems. Avoid this combination
What does Cisco recommend configuring trunk negotiation to for better security?
Disabling it on most ports
What two commands could you use to disable DTP / trunking negotiations?
switchport mode access
switchport nonegotiate
What is IP telephony?
Phones using IP packets to send and receive voice represented as bits in an IP packet
What is a Cisco product that performs IP telephony control
Cisco Unified Communication Manager
What did Cisco do to help solve the issue of only a single UTP cable being available at a persons desk but needing one for the phone and one for their PC?
Embedded a small three-port switch into each phone
Given a phone and a PC are recommended to be in different VLANs, how does a Switch port support a phone and a PC?
Port acts like an access link for the PCs traffic and a bit like a trunk for phone traffic. Two VLANs: Data VLAN and Voice VLAN. The port mostly acts like an access port, but Voice frames flow with 802.1Q headers
How would you configure a switch with a data and voice vlan?
vlan 10 vlan 11 interface range F0/1-4 switchport mode access switchport access vlan 10 switchport voice vlan 11
How can you view detailed information about the operation of an interface?
show interfaces F0/1 switchport
Do interfaces with Voice VLANs enabled show up in the output of the ‘show interfaces trunk’ command?
No. But show interfaces F0/1 trunk
would list additional information with a status of not-trunking
How would you enable or disable a vlan?
no shutdown vlan 10
shutdown vlan 20
What command would you use to show which VLANs will be forwarded over a given trunk interface?
switchport interfaces F0/1 trunk