Access Switches

[saquib.tandel]

Hello

Transparent mode Vs Client mode which mode is recommended for access switches

Any template from cisco for access switch configuration covering needed security

thanks

ST

[Bilal Nawaz]

If you are utilising VTP in a server client environment then use client.

If you are to create vlans separately on the switch, use transparent. (Commonly used)

Please ensure that you do not use the server mode as this could possibly wipe vlans out for an entire estate.

Please see this for further details
http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c52.shtml

Sent from Cisco Technical Support iPhone App

[paul driver]

Hello
vtp can be confusing at timee

access-switches requie client mode to receive the vtp database config off the vtp server

however this all depends on something a revison number

vtp servers and client read which has the highest value and the one with the highest value ( either vtp server or client) will propergate its vlan database to all other vtp server and clients.

transparent mode doesnt accept vtp configurarion but listens and forwards it.

so if you need to add a new switch to the network then change the switch to transparent mode then to client and the revision number will default to 0 and you will be safe to all the new switch to the network

res
Paul


Sent from Cisco Technical Support Android App

[Steven Clinton]

Unless you have a large enterprise/campus setup that requires end-to-end vlans, it is a best practice to use transparent.

Even a client with a higher revision number can overwrite a server with a lower revision.

Sent from Cisco Technical Support iPhone App

[saquib.tandel]

thanks all

can someone share steps to secure an access switch

[Steven Clinton · Accepted solution]

Here is a basic guide to secure your switch:

http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080120f48.shtml

Also there is an autosecure option, but that can sometimes "over-secure" your devices, to the point where you can have problems reaching places you want to reach.

Please mark as correct if this answers your question :-)

Sent from Cisco Technical Support iPhone App