Maintaining Specific VLAN Identification Specifically developed for multi-vlan interswitch communications Places a unique identifier in each frame Functions at Layer 2 2003, Cisco Systems, Inc. All rights reserved. 2-1 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-2 VLAN Trunking Comparing ISL and 802.1Q ISL 802.1Q Proprietary Encapsulated Protocol independent Encapsulates the old frame in a new frame Nonproprietary Tagged Protocol dependent Adds a field to the frame header 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-3 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-4
Trunking with ISL ISL Encapsulation Is a Cisco proprietary protocol Supports PVST Uses an encapsulation process Does not modify the original frame Performed with ASIC Not intrusive to client stations; client does not see the header Effective between switches, and between routers and switches 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-5 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-6 ISL Encapsulation Trunking with 802.1Q An IEEE standard Adds a 4-byte tag to the original frame Additional tag includes a priority field Does not tag frames that belong to the native VLAN Supports Cisco IP telephony 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-7 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-8
The 802.1Q Tagging Process 802.1Q Native VLAN Native VLAN frames are carried over the trunk link untagged. 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-9 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-10 VLAN Ranges and Mappings Trunking Configuration Commands VLAN Range Range Usage 0, 4095 Reserved For system use only 1 2-1001 Normal Normal Cisco default For Ethernet VLANs Trunks can be configured statically or via DTP. DTP provides the ability to negotiate the trunking method. 1002-1005 1025-4094 Normal Extended Cisco defaults for FDDI and Token Ring For Ethernet VLANs only Configuring a Trunk switchport trunk switchport mode switchport nonegotiate 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-11 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-12
Switch Ports and Trunk Ports Switch Port DTP Modes Command Function Mode Function switchport mode access Access port switchport mode trunk Trunk port Sets the switch port to unconditionally be an access port Sets the switch port to unconditionally become a trunk port access trunk nonegotiate Unconditionally sets a switch port to access mode, regardless of other DTP functions Sets the switch port to unconditional trunking mode and negotiates to become a trunk link, regardless of neighbor interface mode Specifies that DTP negotiation packets are not sent on the Layer 2 interface switchport mode dynamic Dynamic port Sets the switch port to dynamically negotiate the status (access or trunk) dynamic desirable Sets the switch port to actively send and respond to DTP negotiation frames. Default for Ethernet dynamic auto Sets the switch port to respond but not to actively send DTP negotiation frames 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-13 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-14 Switchport Mode Interactions How to Configure Trunking Dynamic Auto Dynamic Desirable Dynamic Auto Dynamic Desirable Trunk Access Access Trunk Trunk Access Trunk Trunk Trunk Access Trunk Trunk Trunk Trunk Access Access Access Not recommended Not recommended Access Note: Table assumes DTP is enabled at both ends. show dtp interface to determine current setting 1. Enter interface configuration mode. 2. Shut down interface. 3. Select the encapsulation (802.1Q or ISL). 4. Configure the interface as a Layer 2 trunk. 5. Specify the trunking native VLAN (for 802.1Q). 6. Configure the allowable VLANs for this trunk. 7. Use the no shutdown command on the interface to activate the trunking process. 8. Verify the trunk configuration. 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-15 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-16
802.1Q Trunk Configuration Verifying the 802.1Q Configuration Switch#show running-config interface {fastethernet gigabitethernet} slot/port Switch(config)#interface fastethernet 5/8 Switch(config-if)#shutdown Switch(config-if)#switchport trunk encapsulation dot1q Switch(config-if)#switchport trunk allowed vlan 1,5,11,1002-1005 Switch(config-if)#switchport mode trunk Switch(config-if)#switchport trunk native vlan 99 Switch(config-if)#switchport nonegotiate Switch(config-if)#no shutdown Switch#show interfaces [fastethernet gigabitethernet] slot/port [ switchport trunk ] Switch#show interfaces fastethernet 5/8 switchport Name: fa5/8 Switchport: Enabled Administrative Mode: trunk Operational Mode: trunk Administrative Trunking Encapsulation: dot1q Operational Trunking Encapsulation: dot1q Negotiation of Trunking: Off Access Mode VLAN: 1 (default) Trunking Native Mode VLAN: 99 (trunk_only) Trunking VLANs Enabled: 1,5,11,1002-1005 Pruning VLANs Enabled: 2-1001... 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-17 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-18 Verifying a 802.1Q Dynamic Trunk Link Switch#show running-config interface fastethernet 5/8 Building configuration... Current configuration:! interface FastEthernet5/8 switchport mode dynamic desirable switchport trunk encapsulation dot1q Switch#show interfaces fastethernet 5/8 trunk Port Mode Encapsulation Status Native vlan Fa5/8 desirable 802.1q trunking 99 Port Vlans allowed on trunk Fa5/8 1,5,11,1002-1005 ISL Trunk Configuration Switch(config)#interface fastethernet 2/1 Switch(config-if)#shutdown Switch(config-if)#switchport trunk encapsulation isl Switch(config-if)#switchport trunk allowed vlan 1-5,1002-1005 Switch(config-if)#switchport mode trunk Switch(config-if)#switchport nonegotiate Switch(config-if)#no shutdown Port Vlans allowed and active in management domain Fa5/8 1,5,1002-1005 Port Vlans in spanning tree forwarding state and not pruned Fa5/8 1,5,1002-1005 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-19 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-20
Verifying ISL Trunking Problem: A Device Cannot Establish a Connection Across a Trunk Link Switch#show running-config interface {fastethernet gigabitethernet} slot/port Switch#show interfaces [fastethernet gigabitethernet] slot/port [ switchport trunk ] Switch#show interfaces fastethernet 2/1 trunk Port Mode Encapsulation Status Native VLAN Fa2/1 trunk isl trunking 99 Port VLANs allowed on trunk Fa2/1 1-5,1002-1005 Port VLANs allowed and active in management domain Fa2/1 1-2,1002-1005 Make sure: The Layer 2 interface mode configured on both ends of the link is valid. The trunk encapsulation type configured on both ends of the link is valid. The native VLAN is the same on both ends of the trunk (802.1Q trunks). Port VLANs in spanning tree forwarding state and not pruned Fa2/1 1-2,1002-1005 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-21 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-22 Summary Trunk links carry traffic from multiple VLANs. ISL is Cisco proprietary and encapsulates the Layer 2 frames. 802.1Q is an IEEE standard for trunking, which implements a 4-byte tag. The 802.1Q native VLANs forward frames without the tag. VLAN numbers have specific ranges and purposes. Various commands are used to configure and verify ISL and 802.1Q trunk links. Allow only required VLANs over the trunk. Implementing VLAN Trunk Protocol 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-23 2003, Cisco Systems, Inc. Inc. All All rights reserved. BCMSN 2.0 2-24 2-24
Objectives VTP Protocol Features Upon completing this lesson, you will be able to: Define VTP and explain where to use it on a switched network Describe how VTP versions 1 and 2 operate including domains, modes, advertisements, and pruning Configure VTP domains in server, client, and transparent modes Verify the VTP configuration Troubleshoot the VTP configuration Advertises VLAN configuration information Maintains VLAN configuration consistency throughout a common administrative domain Sends advertisements on trunk ports only 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-25 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-26 VTP Modes VTP Operation Creates, modifies, and deletes VLANs Sends and forwards advertisements Synchronizes VLAN configurations Saves configuration in NVRAM VTP advertisements are sent as multicast frames. VTP servers and clients are synchronized to the latest revision number. VTP advertisements are sent every 5 minutes or when there is a change. Cannot create, change, or delete VLANs Forwards advertisements Synchronizes VLAN configurations Does not save in NVRAM Creates, modifies, and deletes VLANs locally only Forwards advertisements Does not synchronize VLAN configurations Saves configuration in NVRAM 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-27 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-28
VTP Pruning VTP Versions Increases available bandwidth by reducing unnecessary flooded traffic Example: Station A sends broadcast, and broadcast is flooded only toward any switch with ports assigned to the red VLAN. All switches in a management domain must run the same version. 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-29 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-30 VTP Configuration Guidelines Configuring a VTP Server Configure the following: VTP domain name VTP mode (server mode is the default) VTP pruning VTP password VTP trap Use caution when adding a new switch into an existing domain. Add a new switch in client mode to prevent the new switch from propagating incorrect VLAN information. Switch(config)#vtp server Configures VTP server mode Switch(config)#vtp domain domain-name Specifies a domain name Switch(config)#vtp password password Sets a VTP password Switch(config)#vtp pruning Enables VTP pruning in the domain 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-31 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-32
Configuring a VTP Server (Cont.) Verifying the VTP Configuration Switch#show vtp status Switch#configure terminal Switch(config)#vtp server Setting device to VTP SERVER mode. Switch(config)#vtp domain Lab_Network Setting VTP domain name to Lab_Network Switch(config)#end Switch#show vtp status VTP Version : 2 Configuration Revision : 247 Maximum VLANs supported locally : 1005 Number of existing VLANs : 33 VTP Operating Mode : Client VTP Domain Name : Lab_Network VTP Pruning Mode : Enabled VTP V2 Mode : Disabled VTP Traps Generation : Disabled MD5 digest : 0x45 0x52 0xB6 0xFD 0x63 0xC8 0x49 0x80 Configuration last modified by 0.0.0.0 at 8-12-99 15:04:49 Switch# 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-33 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-34 Verifying the VTP Configuration (Cont.) Problem: VTP Not Updating Configuration on Other Switches Switch#show vtp counters Switch#show vtp counters VTP statistics: Summary advertisements received : 7 Subset advertisements received : 5 Request advertisements received : 0 Summary advertisements transmitted : 997 Subset advertisements transmitted : 13 Request advertisements transmitted : 3 Number of config revision errors : 0 Number of config digest errors : 0 Number of V1 summary errors : 0 VTP pruning statistics: Trunk Join Transmitted Join Received Summary advts received from non-pruning-capable device ---------------- ---------------- ---------------- --------------------------- Fa5/8 43071 42766 5 Make sure switches are connected through trunk links. Make sure the VTP domain name is the same on the appropriate switches. Check that the switch is not in VTP transparent mode. Verify the same password used on all switches in the VTP domain. 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-35 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-36
Summary VTP is used to distribute and synchronize information about VLANs configured throughout a switched network. If you use VTP in your network, you must decide whether to use VTP version 1 or version 2. Verify the supervisor support for VTP before making your decision. When a network device is in VTP server mode, you can change the VLAN configuration and have it propagate throughout the network. Use show commands to verify the VTP configuration. Problems with VTP configuration can frequently be traced to improperly configured trunk links, domain names, VTP modes, or passwords. 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-37 2003, Cisco Systems, Inc. All rights reserved. 2-38 The VTP Domain The VTP Protocol Group of switches that exchange VLAN information VLANs administered centrally at a chosen switch Advertises VLAN configuration information Maintains VLAN configuration consistency throughout a common administrative domain Sends advertisements on trunk ports only 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-39 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-40
VTP Modes VTP Pruning Server (default mode) Creates, modifies, and deletes VLANs Sends and forwards advertisements Synchronizes VLAN configurations Saves configuration in NVRAM Client Cannot create, change, or delete VLANs Forwards advertisements Synchronizes VLAN configurations Does not save in NVRAM Transparent Creates, modifies, and deletes local VLANs Forwards advertisements Does not synchronize VLAN configurations Saves configuration in NVRAM 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-41 Uses bandwidth more efficiently by reducing unnecessary flooded traffic Example: Station A sends broadcast; broadcast flooded only toward any switch with ports assigned to the red VLAN Pruning Disabled Pruning Enabled 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-42 VTP Operation VTP Configuration Commands VTP advertisements are sent as multicast frames. VTP servers and clients are synchronized to the latest revision number. VTP advertisements are sent every 5 minutes or when there is a change. Configuring VTP vtp domain vtp mode vtp password Verifying VTP show vtp status show vtp counters 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-43 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-44
Configuring a VTP Management Domain Configuring and Verifying VTP Configure each switch in the following order to avoid dynamic learning of the domain name: VTP password VTP domain name (case sensitive) VTP mode (server mode is the default) Switch#show vlan brief Displays a list of current VLANs Switch(config)#vtp password password_string Sets the VTP password Switch(config)#vtp domain domain_name Sets the VTP domain name Switch(config)#vtp mode Sets the VTP mode to server, client, or transparent Switch# show vtp status Displays the current settings for VTP 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-45 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-46 Verifying the VTP Configuration Verifying the VTP Configuration (Cont.) Switch#show vtp status Switch#show vtp counters Switch#show vtp status VTP Version : 2 Configuration Revision : 28 Maximum VLANs supported locally : 1005 Number of existing VLANs : 17 VTP Operating Mode : Client VTP Domain Name : BCMSN VTP Pruning Mode : Enabled VTP V2 Mode : Disabled VTP Traps Generation : Disabled MD5 digest : 0x45 0x52 0xB6 0xFD 0x63 0xC8 0x49 0x80 Configuration last modified by 10.1.1.1 at 8-12-05 15:04:49 Switch# Switch#show vtp counters VTP statistics: Summary advertisements received : 7 Subset advertisements received : 5 Request advertisements received : 0 Summary advertisements transmitted : 997 Subset advertisements transmitted : 13 Request advertisements transmitted : 3 Number of config revision errors : 0 Number of config digest errors : 0 Number of V1 summary errors : 0 VTP pruning statistics: Trunk Join Transmitted Join Received Summary advts received from non-pruning-capable device ---------------- ---------------- ---------------- --------------------------- Fa5/8 43071 42766 5 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-47 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-48
Adding a Switch to an Existing VTP Domain Summary Ensure a new switch has VTP revision 0 before adding it to a network. Switches in a VTP domain share VLAN information. VTP advertises VLAN information. VTP operates in one of three modes: server, client, or transparent. VTP Pruning uses available bandwidth more efficiently. VTP uses a specific process to distribute and synchronize VLAN information between switches. Various commands are used to configure and verify VTP operation on a switch. VTP commands should be applied in a particular order. Specific steps should be followed when adding a new switch to an existing VTP domain. 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-49 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-50 Issues with 802.1Q Native VLAN Correcting Common VLAN Configuration Errors Native VLAN frames are carried over the trunk link untagged. A native VLAN mismatch will merge traffic between VLANs. 2003, Cisco Systems, Inc. All rights reserved. 2-51 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-52
802.1Q Native VLAN Considerations Explaining Trunk Link Problems Native VLAN must match at ends of trunk; otherwise, frames will leak from one VLAN to another. By default, the native VLAN will be VLAN1. Avoid using VLAN1 for management purposes. Eliminate native VLANs from 802.1Q trunks by making the native VLAN an unused VLAN. Trunks can be configured statically or autonegotiated with DTP. For trunking to be autonegotiated, the switches must be in the same VTP domain. Some trunk configuration combinations will successfully configure a trunk, some will not. Will any of the above combinations result in an operational trunk? 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-53 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-54 Resolving Trunk Link Problems Common Problems with VTP Configuration When using DTP, ensure that both ends of the link are in the same VTP domain. Ensure that the trunk encapsulation type configured on both ends of the link is valid. On links where trunking is not required, DTP should be turned off. Best practice is to configure trunk and nonegotiate where trunks are required. Updates not received as expected VTP domain and password must match. Missing VLANs Configuration has been overwritten by another VTP device. Too many VLANs Consider making VTP domain smaller. 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-55 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-56
Example of New Switch Overwriting an Existing VTP Domain Example of New Switch Overwriting an Existing VTP Domain (Cont.) New switch not connected New switch connected VTP Version : 2 Configuration Revision : 2 Maximum VLANs supported locally : 1005 Number of existing VLANs : 7 VTP Operating Mode : Client VTP Domain Name : building1 VTP Version : 2 Configuration Revision : 2 Maximum VLANs supported locally : 1005 Number of existing VLANs : 7 VTP Operating Mode : Client VTP Domain Name : building1 VTP Version : 2 Configuration Revision : 1 Maximum VLANs supported locally : 1005 Number of existing VLANs : 6 VTP Operating Mode : Server VTP Domain Name : building1 VTP Version : 2 Configuration Revision : 2 Maximum VLANs supported locally : 1005 Number of existing VLANs : 7 VTP Operating Mode : Server VTP Domain Name : building1 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-57 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-58 Implementing VTP in the ECNM Summary Plan VTP domain boundaries. Have only one or two VTP servers. Configure a VTP password. Manually configure the VTP domain name on all devices. When setting up a new domain: Configure VTP client switches first so that they participate passively. When cleaning up an existing VTP domain: Configure passwords on servers first because clients may need to maintain current VLAN information until the server is verified as complete. 802.1Q native VLAN can cause security issues. Configure the native VLAN to be an unused VLAN. Some trunk link configuration combinations can result in problems on the link. Best practice is to configure trunks statically rather than with DTP. Misconfiguration of VTP can give unexpected results. Make only one or two VTP servers; keep the remainder as clients. 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-59 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-60
Transparent Bridging A switch has the same characteristics as a transparent bridge. 2003, Cisco Systems, Inc. All rights reserved. 2-61 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-62 Redundant Topology Broadcast Storms Server/host X Router Y Server/host X Router Y Segment 1 Segment 1 Broadcast Switch A Switch B Segment 2 Redundant topology eliminates single points of failure Redundant topology causes broadcast storms, multiple frame copies, and MAC address table instability problems Host X sends a Broadcast Segment 2 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-63 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-64
Broadcast Storms Broadcast Storms Server/host X Router Y Server/host X Router Y Segment 1 Segment 1 Broadcast Switch A Switch B Switch A Broadcast Switch B Segment 2 Segment 2 Host X sends a Broadcast Switches continue to propagate broadcast traffic over and over 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-65 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-66 Multiple Frame Copies Multiple Frame Copies Server/host X Unicast Router Y Segment 1 Server/host X Unicast Unicast Router Y Segment 1 Unicast Switch A Switch B Switch A Switch B Segment 2 Host X sends an unicast frame to router Y Router Y MAC address has not been learned by either switch yet 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-67 Segment 2 Host X sends an unicast frame to Router Y Router Y MAC Address has not been learned by either Switch yet Router Y will receive two copies of the same frame 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-68
MAC Database Instability MAC Database Instability Server/host X Router Y Server/host X Router Y Unicast Segment 1 Unicast Unicast Segment 1 Unicast Port 0 Port 0 Port 0 Port 0 Switch A Switch B Switch A Switch B Port 1 Port 1 Port 1 Port 1 Segment 2 Segment 2 Host X sends an unicast frame to Router Y Router Y MAC Address has not been learned by either Switch yet Switch A and B learn Host X MAC address on port 0 Host X sends an unicast frame to Router Y Router Y MAC Address has not been learned by either Switch yet Switch A and B learn Host X MAC address on port 0 Frame to Router Y is flooded Switch A and B incorrectly learn Host X MAC address on port 1 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-69 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-70 Preventing Bridging Loops Spanning Tree Algorithm (STA) Part of 802.1d standard Simple principle: Build a loop-free tree from some identified point known as the root. Redundant paths allowed, but only one active path. Developed by Radia Perlman Bridging loops can be prevented by disabling the redundant path. 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-71 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-72
The Spanning Tree Algorhyme by Radia Perlman Bridge Protocol Data Unit I think that I shall never see A graph more lovely than a tree. First, the root must be selected. By ID, it is elected. A tree whose crucial property Is loop-free connectivity. A tree that must be sure to span. So packets can reach every LAN. Least cost paths from root are traced. In the tree, these paths are placed. A mesh is made by folks like me, Then bridges find a spanning tree. BPDUs provide for the exchange of information between switches. 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-73 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-74 Root Bridge Selection The STP Root Bridge Reference point One root per VLAN Maintains topology Propagates timers 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-75 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-76
Extended System ID in Bridge ID Field 802.1D 16-bit Bridge Priority Field Using the Extended System ID Bridge ID Without the Extended System ID Bridge ID with the Extended System ID Only four high-order bits of the 16-bit Bridge Priority field carry actual priority. Therefore, priority can be incremented only in steps of 4096, onto which will be added the VLAN number. Example: For VLAN 11: If the priority is left at default, the 16-bit Priority field will hold 32768 + 11 = 32779. 2 15 4 bits 12 bits Priority VLAN Number Priority Values (Hex) Priority Values (Dec) 0 0 1 4096 2 8192.... 8 (default) 32768.... F 61440 2 0 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-77 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-78 Configuring the Root Bridge Spanning Tree Protocol Root Bridge Selection Switch(config)#spanning-tree vlan 1 root primary This command forces this switch to be the root. Switch(config)#spanning-tree vlan 1 root secondary This command configures this switch to be the secondary root. Or Switch(config)#spanning-tree vlan 1 priority priority This command statically configures the priority (in increments of 4096). Which switch has the lowest bridge ID? 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-79 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-80
Spanning-Tree Operation Four-Step Spanning-Tree Decision Process One root bridge per network One root port per nonroot bridge One designated port per segment Nondesignated ports are blocked Lowest root BID Lowest path cost to root bridge Lowest sender BID Lowest port ID 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-81 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-82 Spanning Tree Port States Local Switch Root Port Election Spanning tree transitions each port through several different states. 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-83 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-84
Spanning-Tree Path Cost Spanning Tree Protocol Root Port Selection Fast Ethernet RP Ethernet SW X is the root bridge SW Y needs to elect a root port Which port is the root port on SW Y? FastEthernet total cost = 0 + 19 Ethernet total cost = 0 + 100 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-85 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-86 Spanning Tree Protocol Designated Port Selection STP Root Bridge Selection Example DP Fast Ethernet RP DP Ethernet Switch X is the root bridge. All ports on the root bridge are designated ports. Do all segments have a designated port? Which bridge will be the root bridge? 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-87 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-88
STP Root Port Selection Example STP Designated Port Selection Example Which ports will be root ports? Which port becomes the designated port on segment 3? 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-89 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-90 Example: Layer 2 Topology Negotiation Spanning Tree Protocol The Spanning Tree Protocol (IEEE 802.1d) specifies an algorithm to be used to maintain a loop-free spanning tree of links between bridges. The spanning tree algorithm finds a spanning tree starting from a root node. ID=40 ID=75 ID=20 ID=10 ID=80 To begin, each bridge must have a unique numeric ID. Typically this is the MAC address plus a priority. 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-91 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-92
Spanning Tree Algorithm Spanning Tree Algorithm Each node maintains three pieces of information for each port: R = ID of current root node d = distance from root node N = closest upstream node (closer to root node) Denote this as (R, d, N): (Root-ID, dist, NextNode) (40,0,-) 40 (40,0,-) 20 (20,0,-) (40,0,-) (10,0,-) Initially each node designates itself as the root node! 10 (10,0,-) (75,0,-) (75,0,-) (80,0,-) 75 80 (80,0,-) Nodes send out spanning tree updates on each port. For example, node 40 would send out the updates shown at right. (40,0,40) 20 40 (40,0,40) 10 (40,0,40) 75 80 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-93 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-94 Spanning Tree Algorithm Spanning Tree Algorithm Other nodes would also send configuration updates. The figure at right shows the updates sent by nodes 10 and 75. 20 40 (10,0,10) (75,0,75) 10 75 (75,0,75) 80 (10,0,10) When a node receives an updates from another node, it updates its own port information if: update identifies a root node with a smaller ID update identifies a root node with same ID but smaller distance root node and distance are same, but sending node has a smaller ID (20,1,20) 40 (40,0,-) 20 (20,0,-) (10,1,10) (10,0,-) 10 (40,1,40) (75,0,-) 75 80 (75,1,75) (10,0,-) (10,1,10) During the first iteration, the links would update their link information like this. 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-95 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-96
Spanning Tree Algorithm Spanning Tree Algorithm After a node receives configuration updates, it selects the best configuration and discards the others. (20,1,20) 40 (40,0,-) 20 (20,0,-) (10,1,10) (10,0,-) 10 (40,1,40) (75,0,-) 75 80 (75,1,75) (10,0,-) (10,1,10) When a node receives a configuration message which contains a smaller root ID, then it knows that it is not the root node. So, it stops generating its own configuration messages and only forwards received messages (with distance incremented and upstream node modified). 40 20 (20,0,-) (10,1,10) (10,0,-) 10 (40,1,40) 75 80 After 1 iteration, nodes 40, 75, and 80 know that they are not the root node. Node 20 still thinks it is the root. (10,0,-) (10,1,10) 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-97 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-98 Spanning Tree Algorithm Spanning Tree On the next iteration, nodes that realize they are not the root forward root updates to other nodes. (10,1,40) 40 (10,1,40) 20 (10,1,10) (10,0,-) 10 (10,0,-) (10,1,80) (10,1,10) 75 80 (40,1,75) Nodes 40 and 80 forward root updates. Node 75 also forwards an update to node 80, but node 80 discards it. When the updates stabilize, only the root node is generating configuration messages. Other nodes are forwarding messages only over links which are part of the spanning tree -- called a designated bridge. Links not on the spanning tree are not used to forward frames; such links are said to be blocked. 40 20 (10,2,40) (10,1,10) (10,0,-) 10 (10,2,40) 75 80 (10,0,-) (10,1,10) blocked link: not used When algorithm stabilizes, the active links form a spanning tree. 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-99 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-100
Spanning Tree Properties Example 1. In a connected network, a loop-free spanning tree always exists. 2. The spanning tree algorithm will always stabilize on a loop-free tree after at most (#nodes) iterations. 3. The spanning tree may not be the most efficient path. 4. Spanning tree cannot route around a congested link. 40 20 10 75 80 The spanning tree may not be the most efficient path between nodes. 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-101 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-102 Example Exercise 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-103 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-104
Exercise Exercise 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-105 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-106 Enhancements to STP Describing PortFast PortFast Per VLAN Spanning Tree+ (PVST+) Rapid Spanning Tree Protocol (RSTP) Multiple Spanning Tree Protocol (MSTP) MSTP is also known as Multi-Instance Spanning Tree Protocol (MISTP) on Cisco Catalyst 6500 switches and above Per VLAN Rapid Spanning Tree (PVRST) 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-107 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-108
Configuring PortFast IEEE Documents Configuring spanning-tree portfast (interface command) or spanning-tree portfast default (global command) enables PortFast on all nontrunking ports Verifying show running-config interface fastethernet 1/1 IEEE 802.1D IEEE 802.1Q IEEE 802.1w IEEE 802.1s IEEE 802.1t - Media Access Control (MAC) bridges - Virtual Bridged Local Area Networks - Rapid Reconfiguration (Supp. to 802.1D) - Multiple Spanning Tree (Supp. to 802.1Q) - Local and Metropolitan Area Network: Common Specifications 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-109 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-110 Summary Transparent bridges require no client configuration. A bridge loop may occur when there are redundant paths between switches. A loop free network eliminates redundant paths between switches. The 802.1D protocol establishes a loop-free network. The root bridge is a reference point for STP. Each STP port will host a specific port role. Enhancements now enable STP to converge more quickly and run more efficiently. 2003, Cisco Systems, Inc. All rights reserved. BCMSN v2.0 2-111