VTP Client or transparent

We have a big facility that we are deploying about 25 2960's used for access switches.   We have heard transparent is the best practice.  Is this still true and if it is can someone tell me why?    Throughout our environment, we have a cross of some running transparent and some running client.  It would be nice to stick to some standard.   Thanks!

VTP is a protocol that should be used carefully because it can lead to nasty effects. In regards to your question, there are some benefits when using transparent mode:
You can create private VLANs (they are not advertised through the trunk links).
You can create VLAN IDs from 1006 to 4094, 1024 limit is not a problem (extended VLANs are not saved in the VLAN database and are not propagated in this mode).
VTP and VLAN configuration are also saved in the switch running configuration file.
When you delete a VLAN from a switch that is in VTP transparent mode, the VLAN is deleted only on that specific switch.
In general, according to your network topology and your needs, the use of VTP is optional. If this switches are access switches, you can configure VTP Client in those you need the same VLANs. For example, if you have 10 switches that must be configured with the same VLAN info, that switches can be VTP Client and the others can be VTP Transparent (in order to forward VLAN info through all switches), but as I told you, this depends on what you need.
I suggest you to configure VTP Transparent in the switches you need to manually create VLANs and do not want to advertise them or configure private VLANs. Besides, for best practices and for security reasons, it is important to avoid sharing all VLAN info between all the switches. So, the switches that have VLANs with servers or do not have end user's VLANs, would be configured as VLAN transparent.
Configure VTP Client in the switches that will have the same VLAN info, then just configure a VTP server with the VLAN info and that is all, well, do not forget to do the proper configuration to share info between the switches (VTP domain, authentication, version, etc).
This link is useful to understand VTP:
http://www.cisco.com/c/en/us/support/docs/lan-switching/vtp/10558-21.html
This link is useful if you need help when configuring VTP:
http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3560/software/release/12-2_52_se/configuration/guide/3560scg/swvtp.html
Best Refards,

Similar Messages

  • What is the advantage of setting VTP mode to transparent?

    I have a Cat 6509 and eighteen 3524 and/or 3548's. Obviously I want my 6509 to be in VTP server mode. But is there any advantage/disadvantage to having the 3500's in client or transparent. I would think client, but is transparent use less resources, both internal to the switch, and , external, i.e., network resources. I've seen some CCIE's insist that the 3500's must be in transparent mode and configure the VLAN info on them manually. What is preferred?

    Configuring VTP in transparent mode requires manual configuration, a VTP-transparent switch does not advertise VLAN information to other switches and will ignore VTP updates from VTP clients and servers.
    VTP propagates information about the VLAN configuration throughout the switched network. A Catalyst 6000 family switch can operate in any one of these three VTP modes:
    Server—VTP servers advertise their VLAN configuration to other switches in the same VTP domain and synchronize their VLAN configuration with other switches based on advertisements received over trunk links. VTP server is the default mode.
    Client—VTP clients are similar to VTP servers, except that you cannot create, change, or delete VLANs on a VTP client.
    Transparent—VTP transparent switches do not participate in VTP. A VTP transparent switch does not advertise its VLAN configuration and does not synchronize its VLAN configuration based on received advertisements.

  • Why my VTP client switch changes automatically to vtp transparent?

    hi ppl!
    i got a severe problem in my network. currently, we are implementing cisco 5509 catos based layer switch as our vtp mode server. so when i tried to hook up a new cisco 2950 switch by configuring it as vtp client with the same vtp domain name with dat of cisco 5509 vtp server mode, it will automatically change to vtp transparent mode but with the same vtp domain name. so, is there anyone dat can give me the best solution to mitigate my problem. e-mail me via [email protected]
    dawit [B.Sc,CCNA,CCNP], Ethiopia
    thanx

    here is the configuration as per your request
    version 12.1
    service nagle
    no service pad
    service timestamps debug uptime
    service timestamps log uptime
    service password-encryption
    service linenumber
    hostname ccr6switch1
    logging monitor notifications
    aaa new-model
    aaa authentication login default local
    ip subnet-zero
    no ip source-route
    no ip gratuitous-arps
    ip domain-name netdev.aau.edu.et
    ip name-server 10.6.10.22
    ip name-server 10.5.10.22
    ip name-server 10.4.10.22
    ip dhcp-server 10.6.10.100
    vtp domain aau
    vtp mode transparent
    vlan 6
    name 4kthin
    said 10006
    vlan 7
    name 5kthin
    said 10007
    vlan 8
    name thinclient
    said 10008
    vlan 9
    name Multi
    said 10009
    vlan 10
    name SSserverFarm
    vlan 13
    name ccr6_1
    vlan 14
    name ccr6_2
    vlan 15
    name ccr6_3
    vlan 16
    name ies1
    vlan 17
    name ies2
    vlan 18
    name sisa6switch1
    vlan 19
    name bued6switch1
    vlan 20
    name ken6switch1
    vlan 21
    name ken6switch2
    vlan 22
    name law6switch1
    vlan 23
    name reg6switch1
    vlan 24
    name ier6switch1
    vlan 25
    name glib6switch1
    vlan 26
    name idrl6switch1
    spanning-tree extend system-id
    no spanning-tree vlan 6
    no spanning-tree vlan 7
    no
    no spanning-tree vlan 19
    interface FastEthernet0/1
    description from ccr6switch2
    switchport trunk allowed vlan 1,11-15,300,301,1001-1005
    switchport mode trunk
    no ip address
    interface Vlan1
    ip address 10.1.0.6 255.255.255.0
    no ip redirects
    no ip redirects
    no ip proxy-arp
    no ip route-cache
    ip default-gateway 10.1.0.2
    ip http server
    ^C
    AND THE SOFTWARE VERSION IS
    IOS (tm) C2950 Software (C2950-I6Q4L2-M), Version 12.1(9)EA1, RELEASE SOFTWARE (
    fc1)

  • Move a switch from VTP client mode to VTP transparent mode

    Hi,
    Does anybody have an experience / knowledge if I move a switch from VTP client mode to VTP transparent mode, should I re-create all the VLANs on this switch?
    Thank you!

    Hi there,
    The VTP and the VLANs are seperate beasts.
    The switch has a vlan database which is held in a seperate file to the config. If you type "sh flash" you'll see it in there.
    VTP passes around the VLAN information and the switch stores it in the vlan database. If you remove the switch from the VTP domain, then VTP will not be able to update this file and it will remain exactly as it was.
    In short - if you've got 20 vlans, when you go to VTP transparent, you'll still have 20 vlans
    Regards,
    LH
    Please rate all posts

  • The difference between VTP server and transparent mode on Catalyst Switch.

    Hello 
    I have a question about the difference between VTP server mode and VTP transparent mode on general catalyst switch.
    Basically VTP server mode can create and modify VLAN configuration but  actually there is not any VLAN configuration through running-config, is it true?  When I checked it on Cat3550, certainly there is not VLAN configuration on VTP server mode. But VTP transparent can create VLAN and configuration but does not synchronize with other switch VLAN status. I appreciate any related information and reason of the VTP server mode specification, thank you very much.
    [VTP Transparent mode]
    3550#sh vtp status
    VTP Version                     : 2
    Configuration Revision          : 0
    Maximum VLANs supported locally : 1005
    Number of existing VLANs        : 27
    VTP Operating Mode              : Transparent
    VTP Domain Name                 :
    VTP Pruning Mode                : Disabled
    VTP V2 Mode                     : Disabled
    VTP Traps Generation            : Disabled
    *omit
    3550#
    3550#sh run
    Building configuration...
    *omit
    vlan 99
     name TEST-VLAN
    [VTP Server mode]
    3550#sh vtp status
    VTP Version                     : 2
    Configuration Revision          : 0
    Maximum VLANs supported locally : 1005
    Number of existing VLANs        : 27
    VTP Operating Mode              : Server
    VTP Domain Name                 :
    VTP Pruning Mode                : Disabled
    VTP V2 Mode                     : Disabled
    VTP Traps Generation            : Disabled
    *omit
    3550#
    3550#sh run
    Building configuration...
    *no VLAN like above configuration on VTP transparent mode.
    Best Regards,
    Masanobu Hiyoshi

    Hi mhiyoshi,
    3550#sh vtp status
    VTP Version                     : 2
    Configuration Revision          : 0
    Maximum VLANs supported locally : 1005
    Number of existing VLANs        : 27
    VTP Operating Mode              : Transparent
    VTP Domain Name                 :
    VTP Pruning Mode                : Disabled
    VTP V2 Mode                     : Disabled
    VTP Traps Generation            : Disabled
    *omit
    3550#
    3550#sh run
    Building configuration...
    *omit
    vlan 99
     name TEST-VLAN
    The above out put indicates that Vlan is created and then mode changed to transparent. i.e why revision no is 0.
    3550#sh vtp status
    VTP Version                     : 2
    Configuration Revision          : 0
    Maximum VLANs supported locally : 1005
    Number of existing VLANs        : 27
    VTP Operating Mode              : Server
    VTP Domain Name                 :
    VTP Pruning Mode                : Disabled
    VTP V2 Mode                     : Disabled
    VTP Traps Generation            : Disabled
    *omit
    3550#
    3550#sh run
    Building configuration...
    *no VLAN like above configuration on VTP transparent mode.
    This indicates that vlan never created in server mode nor learnt from another switch as revision no is 0

  • VTP CLIENT ERASE VLAN INFO

    Could you pls explain how can a new switch added as vtp client (with higher rev no.)erase vlan info.In some materials it says it can erase it,but some says it cant.Pls clarify

    Incorrect.
    SW-11 will ignore the VTP updates from other switches because of their lower configuration revision number. At the same time, other switches will receive VTP updates from SW-11 ,finding that the received updates has a higher revison number and thus replace their own vlan info with the received updates. At that time, all switches will have identical vlan information as SW-11.
    A typical wrong concept is that switches in VTP client mode cannot overcome switch in server mode. There is no such a definition about VTP client mode. The true definition of VTP client mode , according to "Cisco Lan Switch" by Kenndy Clark, page 545, is that switch in client mode CAN source and listen to VTP messages, but CANNOT create and remember VLAN. ("source" means send out VTP message, "remember" means store VLAN info on the NVRAM)
    According to this definition, switches in server mode and client mode will both send out VTP messages, and there is no rule that messages from server mode should beat the one from client mode. The rule is the revision number determines who will win. However, it is rarely possible to make switch in client mode to have an higher revision number than one in server mode. I have designed a lab to make this happen, described as follows.
    I have 3 swithces and have them connect as below:
    SW1---SW3---SW2
    SW1 and SW2 are VTP servers, while SW3 is a VTP client. The connections among them are trunks.
    First I create 10 VLANs on SW1. All switches have 10 VLANs and VTP revision number 10.
    Then I shutdown the connection between SW3 and SW2. SW2 is isolated from others, but VLAN info among them is still the same
    Then I delete 5 VLAN on SW1. Now SW1 and SW3 have only 5 VLANs and VTP revision number 15. SW2 has 10 VLANs and VTP revision number 10.
    Then I shutdown the connection between SW1 and SW3. Now we have 3 isolated switches. SW3 have 5 VLANs and VTP revision number 15. SW2 has 10 VLANs and VTP revision number 10.
    Notice that SW3 is in VTP client mode and have an higher revision number than SW2 which is a VTP server. Now I restore the connection between SW3 and SW2 so they can start to exchange VTP message, and the result is -- Client prevails Server. HOORAY!
    Option A commit a wrong concept and hope someone fall into the trap. Unfortunately , this happens all the time.
    HTH
    SSLIN

  • VTP client spontaneously becoming server?

    Hello all,
    I recently heard of an instance in which a VTP client was connected to a network without first being erased or having it's VTP revision reset to 0. The revision number on this client was higher than that of the network it was connected to and, according to the person I was speaking with, the vtp client promoted itself to vtp server and wiped out their vlan config.
    My question is: Can this actually happen or has someone fed him a line? I've never heard of that occuring and cannot find any documents referencing anything like that.
    Thanks,
    --jesse

    This does indeed happen. It's not that the client has become a server, it's just the normal behavior of a client is not what you might expect from its name. The VTP domain can be updated by clients as well as by servers; all that is needed is a higher configuration revision. The only difference between a server and a client is that the CLI in a client will not allow you to modify the database.
    Kevin Dorrell
    Luxembourg

  • Fail to ping from VTP server to a host connected to VTP Client

    Hi guys, 
    I have 2 3560 configured as VTP server and client, did all the trunk setup. A VLAN 102 172.100.4.254/24 created on server side.
     Now I can ping the 172.100.4.211 and 172.100.4.254 from vtp client switch
     but can't ping 172.100.4.211 from vtp server switch.
     routing is handled by a 2811 which can also ping 172.100.4.211 and 172.100.4.254. 
    Any help is appreciated... 

    it's like this: 
    2811         -  3560(vtp server )  -  3560(vtp client)   -   ESXi  
    ip route        VLAN 102                                                VLAN 102 
                        172.100.4.254                                         172.100.4.211 
                        VLAN 101                                                VLAN 101 
                        172.16.70.254                                         172.16.70.201  
    And I just figured out the issue, the address 4.211 belongs to network node in a openstack, should be bind to a bridge instead of interface. thanks anyway! 

  • Newly created vLAN in VTP Domain issue with VTP Client

    Hello,
    I have a VTP Domain with WS-c4506 switch "server" and multiple c2950 "clients" along Microsoft DHCP server.
    I have this infrastructure 5 years ago up & running without any problems but nowadays we need to add a new vLAN wireless access points i already created the vlan on the server checked it is created on clients show vlan found the new vlan.
    I
    assigned fa port to it on the core switch "server" i have the access point connected to it have some problems obtaining IP Address but it got fixed by restarting the DHCP server.
    problem with VTP clients that when i try to assign port to the new vlan it always takes APIPA and even when i give the laptop connected directly to the port static IP address with the same range of the new vlan at acts like there is now networks exist it cannot ping anything within the network.
    it all looks right but i dont know why it doesnt connect to the network like it should.
    any recommendations?

    Yes. I can Telnet over the site to site tunnel to the Cisco 881. I can not Telnet via the VPN Client to the Cisco 881 or ping it's LAN interface.
    GM

  • Switch behaviour in VTP CLIENT mode

    Hi all together!
    In any configuration guide about Cisco switches in chapter about VTP mode following phrase presents "In VTP client mode, VLAN configurations are not saved in NVRAM."
    What does it mean?
    I've made some lab exersises and saw what after receive VTP update message, switch in CLIENT mode, write received information in vlan.dat file. And after reboot, when switch doesn't have trunk connections to any other switch, it has all vlan information but not vlan 1,1002-1005 only.
    From that I make conclusion, what switch in CLIENT mode nevertheless stores VLAN informations in NVRAM (scope in the FLASH for conf. data)

    Hi ankurbhasin!
    I also used to think what it works in way you wrote above. But I say one more time:
    I took 2950T-24 switch. Deleted vlan.dat file. Rebooted switch. Turn switch in CLIENT mode. Connected switch to another switch in Server mode with TEST domain name through trunk port. First switch received VTP update information, including VTP domain name TEST and some number of VLANs. After that I disconnect trunk cable and reloaded my 2950. How I writed in first post switch in client mode after reboot and no trunk connections to any VTP server or client had ALL informations about VTP and VLAN as before reboot.
    And I ask you again what kind of information switch in clinet mode doesn't save into NVRAM?

  • VTP Prunning Betwen VTP Clients

    i have the following VTP Domain scenario, and i want to configure VTP Prunning for clearing some Vlans .
    This configuration is in the 2 Clients.
    Can configure Prunning in this 2 client???/
    or i need to make this configuration in the VTP Server????
    -----=====-------======--------
    Server Client Client

    I will answer this for the sake of future visits on this thread:
    In order to enable VTP prunning you need to enable it on only one VTP server (works for VTP v1, v2) or on EACH VTP server switch if you run VTP v3.
    This is aplicable for a single VTP domain.

  • VLAN Interface Command

    Ok, I thought I had the reason for the VLAN interface command down. I thought it was either used for switch management or routing between VLANS? However, now I realized that some communication wont work with out this command which doesnt make sense. If I have a VLAN, then the switch will only switch packets to ports on the same VLAN. The only way, communication would work between VLANS is if I either enabled routing between VLANs with the VLAN Interface command, connected the switch to another multi-layer switch that did do routing between VLANS, or connected the switch to a router which routed between the VLANs.
    However, I just got this new 3550 switch in, configured the correct ports with the assigned VLANs, and the only way my cisco ip phone would work is if the VLAN Interface for my voice-ip VLAN was configured. The 3550 is connected to a 4507. Now, can someone tell my why this is? You shouldnt have to configure the VLAN Interface, right?(unless I wanted to route between VLANs, which could be done by the 4507)

    Sounds to me like you either dont have the dot1q trunk interface between your 4506 and 3550 working properly, or your 3550 is running the enhanced image which allows routing.
    It would be nice to see your config on both the 3550 and the 4500 to determine the reason. Just a stab at how it should be configured is that on your 4506, you have it running VTP server or transparent with the defined Data and Voice Vlan's. You have a port configured for trunking (which connects to the 3550). On your 3550, you have configured it as a vtp client or transparent and have verified that it has received (or if transparent VTP you have configured) the appropriate VLAN's. You than specified "interface VLAN #" or whatever number for switch management and configured the port that connects to the 4500 as a trunk. Your port connected to the port has the auxillary or voice vlan configured. If this is how your equipment is configured and it still does not work, than look for the line "ip routing" in your 3550 and negate it with "no ip routing".
    If still no worky worky, post your config.
    Cheers,

  • VLANs lost when moving from transparent to client VTP mode ?

    Hello,
    We are not 100% sure of our VTP password. We have a VTP server (CAT) with vlans 1-10, and somewhere a switch (DOG) that is configured for VTP transparent, with vlans 12 and 13 locally configured. We want to configure DOG in VTP client mode, without any operational downtime. What will happen if we configure DOG with a wrong VTP password. Will it lose vlan 12 and 13, or will it still keep them ?
    thanks a lot Karien

    Both the posts before this are accurate in their information.
    I'll just try and break it down for you:
    Simple answer to your question: It will keep the vlan information if the passwords dont match.
    Vlan information WILL be overwritten on the switch if it receives a a VTP update that:
    * succeeds the authentication
    * has a config register higher than the one it is on
    Ofcouse, this 'update' could be from a VTP client or a server but NOT from a vtp transparent switch. (it will never send out the update in the first place).

  • VTP from server to client mode

    Hi,
    I have couple switches setup in VTP server mode. All of them have the same VTP revision number, but most of them should be in VTP client mode.
    Will switching some of them (but the one I really want to have in VTP server mode) into VTP client mode have negative impact on the network? I do know that if you change a switch (with the highest rev #) from client mode to server mode I could end up with problems. However, in my case it will be switching them from server to client mode with all of them with the same Rev #.
    Thanks for the help

    Hello,
    change the switches in question to VTP transparent mode first, and then to client mode, that will reset the revision and prevent any possible conflicts.
    In addition, in case you need to change the root switch as well, in general the VTP server switch should also be the root for your VLANs. You can set the switch as root by configuring it as:
    spanning-tree vlan x priority 0
    HTH,
    GP

  • VTP Transparent Mode in 2924XL/3524XL

    I have a 2924XL ver12.0(5)WC11 connected to two 3550 ver12.1(22)EA5 via 802.1Q trunks. They are all in the same VTP domain. The 2924XL is in VTP Client mode & the two 3550s are in VTP Server mode. There are only 6 vlans - 1, 223, 1002, 1003, 1004, & 1005. I am attempting to change all switches to VTP Transparent mode.
    Starting w/the 2924XL, when I change mode from VPT Client mode to VTP Transparent mode, the interfaces w/the trunk links immediately bounce & when they come back up, communication is only established thru VLAN1 & am no longer to communicate to devices in VLAN223.
    Connection was restored when I reconfigured the 2924XL back to VTP Client mode.
    What is causing this problem & what is the proper way to convert to Transparent mode w/o interruption of service?
    Thanks!

    Humm ...
    well, please help me to understand the problem.
    The VTP Client saves the vlan infos in RAM, and not in NVRAM like VTP Server ... when you change the VTP mode Client to Transparent, why you lose you vlan infos?
    If you do a "sh vlan" on one of your switches that is in client mode, then change it to be in transparent mode, none of them would disappear.
    It will simply stop listening to vtp messages regarding the creation and deletion of vlans.
    Then, of course, you have to create the vlan database in NVRAM ...
    Thanks for your support
    Regards
    Andrea

Maybe you are looking for