Friday 17 April 2015

Configuring VLANs (Cont.)

Configuring Extended-Range VLANs

When the switch is in VTP transparent mode (VTP disabled) and the enhanced software image is installed), you can create extended-range VLANs (in the range 1006 to 4094). Extended-range VLANs enable service providers to extend their infrastructure to a greater number of customers. The extended-range VLAN IDs are allowed for any switchport commands that allow VLAN IDs. You always use config-vlan mode (accessed by entering the vlan vlan-idglobal configuration command) to configure extended-range VLANs. The extended range is not supported in VLAN configuration mode (accessed by entering the vlan database privileged EXEC command).
Extended-range VLAN configurations are not stored in the VLAN database, but because VTP mode is transparent, they are stored in the switch running configuration file, and you can save the configuration in the startup configuration file by using the copy running-config startup-config privileged EXEC command.
This section includes this information about extended-range VLANs:
Default VLAN Configuration
Configuration Guidelines for Extended-Range VLANs
Creating an Extended-Range VLAN
Displaying VLANs

Default VLAN Configuration

See Table 13-3 for the default configuration for Ethernet VLANs. You can change only the MTU size on extended-range VLANs; all other characteristics must remain at the default state.

Configuration Guidelines for Extended-Range VLANs

Follow these guidelines when creating extended-range VLANs:
To add an extended-range VLAN, you must use the vlan vlan-id global configuration command and access config-vlan mode. You cannot add extended-range VLANs in VLAN configuration mode (accessed by entering the vlan database privileged EXEC command).
VLAN IDs in the extended range are not saved in the VLAN database and are not recognized by VTP.
You cannot include extended-range VLANs in the pruning eligible range.
The switch must be in VTP transparent mode when you create extended-range VLANs. If VTP mode is server or client, an error message is generated, and the extended-range VLAN is rejected.
You can set the VTP mode to transparent in global configuration mode or in VLAN configuration mode. See the "Disabling VTP (VTP Transparent Mode)" section. You should save this configuration to the startup configuration so that the switch will boot up in VTP transparent mode. Otherwise, you will lose extended-range VLAN configuration if the switch resets.
VLANs in the extended range are not supported by VQP. They cannot be configured by VMPS.
STP is enabled by default on extended-range VLANs, but you can disable it by using the no spanning-tree vlan vlan-id global configuration command. When the maximum number of spanning-tree instances (64) are on the switch, spanning tree is disabled on any newly created VLANs. If the number of VLANs on the switch exceeds 64, we recommend that you configure the IEEE 802.1S Multiple STP (MSTP) on your switch to map multiple VLANs to a single STP instance. 

Creating an Extended-Range VLAN

You create an extended-range VLAN in global configuration mode by entering the vlan global configuration command with a VLAN ID from 1006 to 4094. This command accesses the config-vlan mode. The extended-range VLAN has the default Ethernet VLAN characteristics (see Table 13-3) and the MTU size is the only parameter you can change. Refer to the description of the vlan global configuration command in the Catalyst 2950 Desktop Switch Command Reference for defaults of all parameters. If you enter an extended-range VLAN ID when the switch is not in VTP transparent mode, an error message is generated when you exit from config-vlan mode, and the extended-range VLAN is not created.
Extended-range VLANs are not saved in the VLAN database; they are saved in the switch running configuration file. You can save the extended-range VLAN configuration in the switch startup configuration file by using the copy running-config startup-config privileged EXEC command.
Beginning in privileged EXEC mode, follow these steps to create an extended-range VLAN:

Command

Purpose

Step 9 

configure terminal

Enter global configuration mode.

Step 10 

vtp mode transparent

Configure the switch for VTP transparent mode, disabling VTP.

Step 1 

vlan vlan-id

Enter an extended-range VLAN ID and enter config-vlan mode. The range is 1006 to 4094.

Step 2 

mtu mtu-size

(Optional) Modify the VLAN by changing the MTU size.

Note Although all commands appear in the CLI help in config-vlan mode, only the mtumtu-size command is supported for extended-range VLANs.

Step 3 

end

Return to privileged EXEC mode.

Step 4 

show vlanid vlan-id

Verify that the VLAN has been created.

Step 5 

copy running-config startup config

Save your entries in the switch startup configuration file. To save extended-range VLAN configurations, you need to save the VTP transparent mode configuration and the extended-range VLAN configuration in the switch startup configuration file. Otherwise, if the switch resets, it will default to VTP server mode, and the extended-range VLAN IDs will not be saved.
To delete an extended-range VLAN, use the no vlan vlan-id global configuration command.
The procedure for assigning static-access ports to an extended-range VLAN is the same as for normal-range VLANs. 
This example shows how to create a new extended-range VLAN (when the enhanced software image is installed) with all default characteristics, enter config-vlan mode, and save the new VLAN in the switch startup configuration file:
Switch(config)# vtp mode transparent

Switch(config)# vlan 2000

Switch(config-vlan)# end

Switch# copy running-config startup config

Displaying VLANs

Use the show vlan privileged EXEC command to display a list of all VLANs on the switch, including extended-range VLANs. The display includes VLAN status, ports, and configuration information. To view normal-range VLANs in the VLAN database (1 to 1005), use the show VLAN configuration command (accessed by entering the vlan database privileged EXEC command). For a list of the VLAN IDs on the switch, use the show running-config vlanprivileged EXEC command, optionally entering a VLAN ID range.
Table 13-4 lists the commands for monitoring VLANs.
Table 13-4 VLAN Monitoring Commands

Command

Command Mode

Purpose

show

VLAN configuration

Display status of VLANs in the VLAN database.

show current [vlan-id]

VLAN configuration

Display status of all or the specified VLAN in the VLAN database.

show interfaces [vlanvlan-id]

Privileged EXEC

Display characteristics for all interfaces or for the specified VLAN configured on the switch.

show running-config vlan

Privileged EXEC

Display all or a range of VLANs on the switch.

show vlan [id vlan-id]

Privileged EXEC

Display parameters for all VLANs or the specified VLAN on the switch.

For more details about the show command options and explanations of output fields, refer to the Catalyst 2950 Desktop Switch Command Reference for this release.
This is an example of output from the show vlan privileged EXEC command, showing all VLANs:
Switch# show vlan


VLAN Name                             Status    Ports

---- -------------------------------- --------- -------------------------------

1    default                          active    Fa0/1, Fa0/2, Fa0/3, Fa0/4

                                                Fa0/5, Fa0/6, Fa0/7, Fa0/8

                                                Fa0/9, Fa0/10, Fa0/11, Fa0/12

                                                Gi0/1, Gi0/2

2    VLAN0002                         active    Fa0/12

22   VLAN0022                         active    Fa0/7

102  VLAN0102                         active

200  VLAN0200                         active

222  VLAN0222                         active

400  VLAN0400                         active

1000 VLAN1000                         active

1002 fddi-default                     active

1003 token-ring-default               active

1004 fddinet-default                  active

1005 trnet-default                    active

2005 VLAN2005                         active

2006 VLAN2006                         active

2007 VLAN2007                         active


VLAN Type  SAID       MTU   Parent RingNo BridgeNo Stp  BrdgMode Trans1 Trans2

---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------

1    enet  100001     1500  -      -      -        -    -        1002   1003

2    enet  100002     1500  -      -      -        -    -        0      0

22   enet  100022     1500  -      -      -        -    -        0      0

102  enet  100102     1500  -      -      -        -    -        0      0

200  enet  100200     1500  -      -      -        -    -        0      0

222  enet  100222     1500  -      -      -        -    -        0      0

400  enet  100400     1500  -      -      -        -    -        0      0

1000 enet  101000     1500  -      -      -        -    -        0      0

1002 fddi  101002     1500  -      -      -        -    -        1      1003

1003 tr    101003     1500  1005   -      -        -    srb      1      1002

1004 fdnet 101004     1500  -      -      1        ibm  -        0      0

1005 trnet 101005     1500  -      -      1        ibm  -        0      0

2005 enet  102005     1500  -      -      -        -    -        0      0

2006 enet  102006     1500  -      -      -        -    -        0      0

2007 enet  102007     1500  -      -      -        -    -        0      0

This is an example of output from the show vlan brief privileged EXEC command:

Switch# show vlan brief



VLAN Name                             Status    Ports

---- -------------------------------- --------- -------------------------------

1    default                          active    Fa0/1, Fa0/2, Fa0/3, Fa0/4

                                                Fa0/5, Fa0/6, Fa0/7, Fa0/8

                                                Fa0/9, Fa0/10, Fa0/11, Fa0/12

                                                Gi0/1, Gi0/2

2    VLAN0002                         active    Fa0/12

22   VLAN0022                         active    Fa0/7

102  VLAN0102                         active

200  VLAN0200                         active

222  VLAN0222                         active

400  VLAN0400                         active

1000 VLAN1000                         active

1002 fddi-default                     active

1003 token-ring-default               active

1004 fddinet-default                  active

1005 trnet-default                    active

2005 VLAN2005                         active

2006 VLAN2006                         active

2007 VLAN2007                         active


This is an example of output from the show running-config vlan command for a range of VLANs:
Switch# show running-config vlan 1005-2005

Building configuration...



Current configuration:

!

vlan 1007

!

vlan 1020

!

vlan 1025

!

vlan 2000

!

vlan 2001


end

No comments:

Post a Comment