cancel
Showing results forĀ 
Search instead forĀ 
Did you mean:Ā 
cancel
779
Views
0
Helpful
1
Replies

Private-vlan

cciepending
Level 1
Level 1
Hi all
Why must configure VTP to transparent mode before  can create a private-vlan
please tell me reasons
1 Accepted Solution

Accepted Solutions

Giuseppe Larosa
Hall of Fame
Hall of Fame

Hello,

VTP is used to advertise the existance of Vlans in a campus network under a common amministration providing information about the vlan-number and some other fields like vlan MTU SAID.

earlier versions of VTP ( 1 and 2) have no concept of private Vlans so the need for VTP transparent.

In other words: if the private vlans were advertised ( if the node would be in VTP server mode)  other switches may use them as standard vlans defeating the purposes that led to private vlan introduction because VTP cannot tell that they are private ( no fields flags in the VTP message).

VTP version 3 might  remove this limitation

yes it can see:

http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/pvlans.html

>>>>Because VTP versions 1 and 2 do not support private VLANs, you must  manually configure private VLANs on all switches in the Layer 2 network.  If you do not configure the primary and secondary VLAN association in  some switches in the network, the Layer 2 databases in these switches  are not merged. This situation can result in unnecessary flooding of  private VLAN traffic on those switches.

VTP version 3 does support private VLANs, so you do not need to manually  configure private VLANs on all switches in the Layer 2 network.

Hope to help

Giuseppe

View solution in original post

1 Reply 1

Giuseppe Larosa
Hall of Fame
Hall of Fame

Hello,

VTP is used to advertise the existance of Vlans in a campus network under a common amministration providing information about the vlan-number and some other fields like vlan MTU SAID.

earlier versions of VTP ( 1 and 2) have no concept of private Vlans so the need for VTP transparent.

In other words: if the private vlans were advertised ( if the node would be in VTP server mode)  other switches may use them as standard vlans defeating the purposes that led to private vlan introduction because VTP cannot tell that they are private ( no fields flags in the VTP message).

VTP version 3 might  remove this limitation

yes it can see:

http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/pvlans.html

>>>>Because VTP versions 1 and 2 do not support private VLANs, you must  manually configure private VLANs on all switches in the Layer 2 network.  If you do not configure the primary and secondary VLAN association in  some switches in the network, the Layer 2 databases in these switches  are not merged. This situation can result in unnecessary flooding of  private VLAN traffic on those switches.

VTP version 3 does support private VLANs, so you do not need to manually  configure private VLANs on all switches in the Layer 2 network.

Hope to help

Giuseppe