Simple VLAN advice

[thomascollins]

Hello,

I have a Cisco 4507 core router, with fiber connections to 2950 switches in user segment closets.

There are a total of 20 VLANs in the building. 10 closets, 2 VLANs in each closet.

How should I setup my VLANs?

I think I have two options...

1) Define all VLANs on the 4507, setup a trunk, and use "switchport trunk allowed vlan X" to determine which VLANs can go down each fiber trunk. Then on the 4507 just define each port and what VLAN it is in.

2) Define all VLANs on the 4507 and use VTP and VTP Pruning to send VLANs down each trunk.

I'm not clear on the difference between VTP and manually defining the VLANs?

Thanks

TRC

[Prashanth Krishnappa]

I would go with option 1. VTP Pruning does not remove STP from Trunks and clearing them manually is a better solution.

[thomascollins]

Thanks.

So to make sure I understand how to setup option 1, let's say I want to use VLANs 101 and 102 on a particular switch:

Cisco 4507:

interface GigabitEthernet1/1

switchport trunk encapsulation dot1q

switchport mode trunk

switchport trunk allowed vlan 1,101,102

!

interface VLAN 101

ip address 10.1.1.0 255.255.255.0

interface VLAN 102

ip address 10.1.2.0 255.255.255.0

Cisco 2950:

interface GigabitEthernet0/1

switchport mode trunk

Then to assign a port on the 2950 to a vlan:

interface FastEthernet0/01

switchport access vlan 101

switchport mode access

interface FastEthernet0/02

switchport access vlan 102

switchport mode access

Two questions...

-Do I need to define VLAN101 and 102 on the 2950 switch? If so, they would just be blank right (no shutdown)

-How do I give the 2950 switch an address inside of VLAN101 for it's management address. Just configure VLAN101 on the switch with an IP? Or would it be VLAN1 that has the IP?

Thanks!

[Prashanth Krishnappa · Accepted solution]

1)It is not a requirement to have SVIs on 2950 since it is a layer 2 switch only but you might want to create one and assign an IP address for management purpose(ping/telnet/SNMP)

2)Yes.. Just configure interface VLAN 101, an ip address under it and issue a no shut.