Chapter 8 - Implementing Ethernet Virtual LANs Flashcards
True or False. A switch won’t transmit frames across VLANs/Broadcast Domains.
True.
Reasons for separating devices out into VLANs.
- To reduce CPU overhead on each device, improving host performance by reducing the number of devices that receive each broadcast frame.
- To increase security by reducing the number of hosts that receive flooded frames (e.g. broadcast, multicast, and unknown unicast)
- Security is also increased by the fact that you can implement different security policies per VLAN.
- More flexible network designs that are also easier to manage by grouping users by commonalities (e.g. department)
- Reduces workload for STP by reducing the amount of devices in a single broadcast domain
What is VLAN trunking?
- Used to transmit data from multiple VLANs between switches
- Trunking applies a VLAN tag to a frame as an extra header that includes the frame’s VLAN ID. The receiving switch will then know which VLAN each frame belongs to.
What are the two VLAN trunking protocols that Cisco use?
802.1Q and ISL (Inter-Switch Link)
What does 802.1Q change about frames?
It adds a 4-byte VLAN Tag header into frame’s header (In Ethernet this is between the Source Address and Type header). This contains a TPID (Tag Protocol Identifier), PCP (Priority Code Point), DEI (Drop Eligible Indicator), and VLAN ID (12 bits) field.
What is the maximum amount of VLANs you can have on a single LAN?
Theoretically 4096 but in practice it is 4094 as 0 and 4095 are reserved.
How do Cisco switches change the VLAN range?
They break it into two ranges; the normal range (1 to 1005) and the extended range (1006 to 4094). Only switches that support VTPv3 can use the extended range as VLANs in the extended range cannot be learnt via VTPv1 or v2.
What is the default native VLAN and what does it mean?
By default the native VLAN is VLAN 1. Traffic within the native VLAN doesn’t have a VLAN tag applied to it when sent over a trunk so the receiving switch(s) must agree on the native VLAN ID otherwise this can cause a native VLAN mistmatch.
True or False. Devices in different VLANs should be part of different subnets.
True
True or False. In order to communicate between VLANs a router or other layer 3 device needs to be involved.
True. Can’t be done at layer 2.
What is DTP?
Dynamic Trunking Protocol is a Cisco proprietary protocol that allows a port to dynamically become a trunk port or make a connected port a trunk port depending on what DTP mode is set.
-Switchport mode access - Statically sets the interface to be an access port.
Switchport mode trunk - Statically sets the interface to be a trunk port.
- Switchport mode dynamic auto - Allows the interface to passively listen for negotiate messages and be converted to a trunk port by connected interface as long as that interface is set statically to trunk or to switchport mode dynamic desirable.
- Switchport mode dynamic desirable - The interface will initiate and respond to negotiation messages, and actively attempt to convert the connected port to a trunk port as long that interface is statically set to trunk, or to switch port desirable/auto. If it is set to access it will remain this way
Setting a port statically to access will disable DTP. Setting a port statically to trunk will leave DTP enabled.
What is VTP?
VLAN Trunking Protocol is a Cisco proprietary protocol that advertises VLAN information on one switch to all other switches on the same VTP domain. VTP settings (Domain, Password, Version) must match for it to function.
- Server mode - The default VTP mode. All changes made on a switch in this mode will be advertised to client switches.
- Client mode - In this mode switches will receive updates from VTP servers and also forward updates to other switches.
- Transparent - A transparent switch will not advertise VLAN configuration or synchronize its own to that of its server(s) but will forward updates to other switches.
What is the DTP Administrative Mode and Operational Mode?
- Administrative mode is what is configured on the switch port.
- Operational mode is the actual status of the port. (e.g. If administrative mode is set to dynamic auto, the operational mode would be trunk if the opposite switchport is set to trunk or dynamic desirable).
What is the command used to specifically define a voice VLAN?
switchport voice vlan <vlan-id></vlan-id>
True or False. Switches will not forward VLAN traffic for VLANs that are not defined in said switch or has not been learned via VTP.
True. They will also not forward VLAN traffic for VLANs that have been shutdown.