Do you configure the VLANs on the distribution or access layer switches or both?
- Thread starter drbx19
- Start date
Permabanned
- Joined
- 28 Dec 2009
- Posts
- 13,052
- Location
- london
Vlan is configured on all the switches that will switch that network i think. But predominately it will be configured on distribution layer and rarely core layer.
I think vlans sit above DTP ie they are configured to work over DTP. not sure about STP.
I was recently, this weekend, learning about private vlans with esxi 5. esxi5 now supporst pvlan which alllows you to create a sub vlan. The use for this is if you want to have say an accounts department or similar on a vlan but not accessible to the rest of the vlan.
I think vlans sit above DTP ie they are configured to work over DTP. not sure about STP.
I was recently, this weekend, learning about private vlans with esxi 5. esxi5 now supporst pvlan which alllows you to create a sub vlan. The use for this is if you want to have say an accounts department or similar on a vlan but not accessible to the rest of the vlan.
Last edited:
personally I think it depends on what access your need for your VLANs, if you only want local access then access layer is good enough, if you have servers that you VLANs need access to and the server is at the distrub layer then you are going to need to give some VLANS access to the distrub layer of the network, have you considered VTP at all? STP is normally on by default... what do you need to know about STP?
Stelly
Stelly
Hi
Thanks for the response
I want all machines on all VLANs to have the ability to communicate if need-be. I was thinking of putting the servers on their own VLAN, thus all VLANs would need to be able to communicate in order to use the servers' resources.
If I use VTP will both the access and distribution servers be configured? That is an idea...
VTP will distribute the VLAN database to switches with a lower VTP revision number that is set to Client or Server mode.
Transparent switches will not be configured with VTP.
If you want to be able to Route between your vlans, you will need a layer 3 device, be that a router (router on a stick) or multilayer switch. For example, if you used a 6500 you would create a SVI for the vlan you want to route, give it an ip address and then route that via the routing process of you choice. You would need to do this for your Server vl and your user vl.
So if I configure one switch (distribution for example), the access layer switches will be configured as well, which will allow for a successful hierarchial topology?
As long they all have have VTP running correctly and not in transparent mode, yes. You'll still have to assign ports to specific VLANS (or trunks) mind.
Also, as above, you'll need some inter-VLAN routing.
Thanks a lot for your help!