Vlans: Switching, Routing, and Wireless Essentials v7.0 (SRWE)
Vlans: Switching, Routing, and Wireless Essentials v7.0 (SRWE)
Vlans: Switching, Routing, and Wireless Essentials v7.0 (SRWE)
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 2
3.1 Overview of VLANs
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 3
Overview of VLANs
VLAN Definitions
VLANs are logical connections with other similar
devices.
Placing devices into various VLANs have the
following characteristics:
• Provides segmentation of the various groups
of devices on the same switches
• Provide organization that is more
manageable
• Broadcasts, multicasts and unicasts are
isolated in the individual VLAN
• Each VLAN will have its own unique range
of IP addressing
• Smaller broadcast domains
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 4
Overview of VLANs
Benefits of a VLAN Design
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 5
Overview of VLANs
Types of VLANs
Default VLAN
VLAN 1 is the following:
• The default VLAN
• The default Native VLAN
• The default Management
VLAN
• Cannot be deleted or
renamed
• VLAN 1 is the default data VLAN because all interfaces are assigned to this VLAN.
Native VLAN
• This is used for trunk links only.
• All frames are tagged on an 802.1Q trunk link except for those on the native VLAN.
Management VLAN
• This is used for SSH/Telnet VTY traffic and should not be carried with end user traffic.
• Typically, the VLAN that is the SVI for the Layer 2 switch.
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 7
Overview of VLANs
Types of VLANs (Cont.)
Voice VLAN
• A separate VLAN is required because Voice
traffic requires:
• Assured bandwidth
• High QoS priority
• Ability to avoid congestion
• Delay less that 150 ms from source to
destination
• The entire network must be designed to
support voice.
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 8
Overview of VLANs
Packet Tracer – Who Hears the Broadcast?
In this Packet Tracer activity, you will do the following:
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 9
3.2 VLANs in a
Multi-Switched Environment
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 10
VLANs in a Multi-Switched Environment
Defining VLAN Trunks
A trunk is a point-to-point link between
two network devices.
Cisco trunk functions:
• Allow more than one VLAN
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 11
VLANs in a Multi-Switched Environment
Networks without VLANs
Without VLANs, all devices connected to the switches will receive all unicast, multicast, and
broadcast traffic.
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 12
VLANs in a Multi-Switched Environment
Networks with VLANs
With VLANs, unicast, multicast, and broadcast traffic is confined to a VLAN. Without a Layer 3
device to connect the VLANs, devices in different VLANs cannot communicate.
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 13
VLANs in a Multi-Switched Environment
VLAN Identification with a Tag
• The IEEE 802.1Q header is 4 Bytes
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 14
VLANs in a Multi-Switched Environment
Native VLANs and 802.1Q Tagging
802.1Q trunk basics:
• Tagging is typically done on all VLANs.
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 15
VLANs in a Multi-Switched Environment
Voice VLAN Tagging
The VoIP phone is a three port switch:
• The switch will use CDP to inform the phone of the Voice
VLAN.
• The phone will tag its own traffic (Voice) and can set Cost
of Service (CoS). CoS is QoS for layer 2.
• The phone may or may not tag frames from the PC.
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 16
VLANs in a Multi-Switched Environment
Voice VLAN Verification Example
The show interfaces fa0/18 switchport command can show us both data and voice
VLANs assigned to the interface.
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 17
VLANs in a Multi-Switched Environment
Packet Tracer – Investigate a VLAN Implementation
In this Packet Tracer activity, you will:
• Part 1: Observe Broadcast Traffic in a VLAN Implementation
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 18
3.3 VLAN Configuration
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 19
VLAN Configuration
VLAN Ranges on Catalyst Switches
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 21
VLAN Configuration
VLAN Creation Example
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 22
VLAN Configuration
VLAN Port Assignment Commands
Once the VLAN is created, we can then assign it to the correct interfaces.
Task Command
Enter global configuration mode. Switch# configure terminal
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 23
VLAN Configuration
VLAN Port Assignment Example
We can assign the VLAN to the port
interface.
• Once the device is assigned the
VLAN, then the end device will need
the IP address information for that
VLAN Prompt Command
• Here, Student PC receives S1# Configure terminal
172.17.20.22
S1(config)# Interface fa0/18
S1(config-if)# Switchport mode access
S1(config-if)# Switchport access vlan 20
S1(config-if)# end
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 24
VLAN Configuration
Data and Voice VLANs
An access port may only be
assigned to one data VLAN.
However it may also be assigned to
one Voice VLAN for when a phone
and an end device are off of the
same switchport.
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 25
VLAN Configuration
Data and Voice VLAN Example
• We will want to create and name both Voice
and Data VLANs.
• In addition to assigning the data VLAN, we
will also assign the Voice VLAN and turn on
QoS for the voice traffic to the interface.
• The newer catalyst switch will automatically
create the VLAN, if it does not already exist,
when it is assigned to an interface.
Note: QoS is beyond the scope of this course.
Here we do show the use of the mls qos trust
[cos | device cisco-phone | dscp | ip-
precedence] command.
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 26
VLAN Configuration
Verify VLAN Information
Use the show vlan command. The
complete syntax is:
show vlan [brief | id vlan-id | name
vlan-name | summary]
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 28
VLAN Configuration
Delete VLANs
Delete VLANs with the no vlan vlan-id command.
Caution: Before deleting a VLAN, reassign all member ports to a different VLAN.
• Delete all VLANs with the delete flash:vlan.dat or delete vlan.dat commands.
Note: To restore to factory default – unplug all data cables, erase the startup-configuration
and delete the vlan.dat file, then reload the device.
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 29
VLAN Configuration
Packet Tracer – VLAN Configuration
In this Packet Tracer activity, you will perform the following:
• Verify the Default VLAN Configuration
• Configure VLANs
• Assign VLANs to Ports
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 30
3.6 Module Practice and Quiz
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 31
Module Practice and Quiz
Packet Tracer – Implement VLANs and Trunking
In this Packet Tracer activity, you will perform the following:
• Configure VLANs
• Assign Ports to VLANs
• Configure Static Trunking
• Configure Dynamic Trunking
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 32
Module Practice and Quiz
Lab – Implement VLANs and Trunking
In this lab, you will perform the following:
• Build the Network and Configure Basic Device Settings
• Create VLANs and Assign Switch Ports
• Configure an 802.1Q Trunk between the Switches
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 33
Module Practice and Quiz
What did I learn in this module?
• VLANs are based on logical instead of physical connections.
• VLANs can segment networks based on function, team, or application.
• Each VLAN is considered a separate logical network.
• A trunk is a point-to-point link that carries more than one VLAN.
• VLAN tag fields include the type, user priority, CFI and VID.
• A separate voice VLAN is required to support VoIP.
• Normal range VLAN configurations are stored in the vlan.dat file in flash.
• An access port can belong to one data VLAN at a time, but may also have a
Voice VLAN.
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 34
Module Practice and Quiz
What did I learn in this module? (Cont.)
• A trunk is a Layer 2 link between two switches that carries traffic for all VLANs.
• Trunks will need tagging for the various VLANs, typically 802.1q .
• IEEE 802.1q tagging makes provision for one native VLAN that will remain
untagged.
• An interface can be set to trunking or nontrunking.
• Trunk negotiation is managed by the Dynamic Trunking Protocol (DTP).
• DTP is a Cisco proprietary protocol that manages trunk negotiations.
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 35