12-09-2022 12:49 PM
Hello Professional,
I know VTP is Cisco exclusive protocol, but not sure how it works.
For example, If my network infrastructure as like this:
<<C3750X - Core switch>> -- <<PFSense Firewall>> -- <<Unifi Switch>> -- <<Cisco 2960X>>
Can Cisco 2960X switch got update (VTP) from C3750X?
or Cisco 2960X won't get any update?
12-09-2022 01:34 PM
VTP no that will not be going to work, it required L2 connectivity.
12-09-2022 02:28 PM - edited 12-09-2022 02:30 PM
if your FW can do Bridge between two link then I think you can bypass the FW.
otherwise since VTP is L2 protool it will not pass.
12-09-2022 02:51 PM
Thank you for the response,
If I can add in detail, actually, PFsense firewall is configured as a bridge mode.
so,
<<C3750X - 코어 스위치>> -- <<PFSense 방화벽>> -- <<Cisco 2960X>> : VTP update Works
<<C3750X - 코어 스위치>> -- <<PFSense 방화벽>> -- <<Unifi 스위치>> -- <<Cisco 2960X>> : Not Works
In this case, considering that *Unifi switch (L2) can't recognize VTP update.* makes sense?
Otherwise, is there any other reason that I keep failing VTP update?
- VTP configure is same with other L2 switches (VTP version, VTP Password..)
- MD5 digest does not match ever since I change the connection to be firewall - unifi switch - C2960 switch.
Thank you Sir.
12-09-2022 03:16 PM
I think because Unifi can not deal with multicast L2 address of VTP frame.
can check see if Unifi see cisco SW as neighbor via CDP, because as I know both VTP and CDP use same Multicast L2 address.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide