Vlans

[asfandyar779514494]

Hey guys I am doing my first project so my question might seem a bit odd.

We have 2 C-9300 switch as core  and 2 C-9200 Switch on aggregation and around 10 2960 switch at access layer.

Now our client has told us to make vlans on core switch, at first I thought we will use VTP to sync vlans on other switches but Senior network engineer in my company has told me that not to use VTP as it can be a disaster. So I wanted to ask if there is some other way to sync vlans in all switches or I will have to make vlans in all switches manually.

Thank you 

[Mark Malone · Accepted solution]

Hi
do it manually on text pad copy and paste or push it from a config manager like prime , your senior is right best practice is to leave vtp off , if vtp 1 switch went in with higher rev number by mistake it could take down the network , in newer switches its off by default now

also lock down the trunks to the specific vlans allowed

[Jaderson Pessoa]

Hello,

You senior network is right about best practices, because a VTP can cause a disaster in your environment in case a missed configuration. If you want configure all vlans automated, i suggest to you use the "prime infrastructure" or a script to run all commands automatic using LINUX, the "RANCID" can be a great tool.

Guide to create using prime: https://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/3-1-3/user/guide/pi_ug/access_network.html

guide to use RANCID: https://www.linux.com/news/backing-your-network-rancid/ << this exemple is to backup your devices, but just change the commands to create vlans.

Regards,

[balaji.bandi]

personally i would not suggest to go with VTP, stay away.

make it transparent, create VLAN Manually is good working method, so you have full control over VLANS