Re: VTP

From: MADMAN (dave@interprise.com)
Date: Tue Oct 01 2002 - 12:36:10 GMT-3


  You could try clearing out all your VTP and then reestablish the trunk
connection to the switch you have no control over. Your switch will
assume the other switches VTP domain and all it's VLANs automatically.
Then you can configure yourself as a server and wreak all kinds of
havoc!!

  Dave

"Larson, Chris" wrote:
>
> You will not automatically get all the Vlans through the trunk if you are
> not in the same VTP domain, however you can explicitly configure vlans from
> one VTP domain to another. Unfortunately, if you only have control of one
> switch, you will not be able to do this. You will need access to both.
> I have not done this in some time so I do not remember the exact commands
> but I know it can be done. I believe you simply need to configure the trunk
> and explicitly allow the vlans on both ends.
>
> > -----Original Message-----
> > From: Bob Rech [SMTP:brech@kc.rr.com]
> > Sent: Tuesday, October 01, 2002 9:08 AM
> > To: Weidong Xiao; Chuck Church
> > Cc: Lyndon Guo; ccielab@groupstudy.com; Phil; Ahamed Maideen
> > Subject: Re: VTP
> >
> > I just tried the following:
> > SW1{5000} vtp domain TEST Server trunked to SW2{2924} vtp domain TEST2
> > Transparent trunked to
> > SW3{1924}vtp domain TEST Client.
> > VTP adv from SW1 do Not get propagated through SW2 unles it is in the same
> > vtp domain even in Transparent mode.
> >
> > ----- Original Message -----
> > From: "Weidong Xiao" <Weidong.Xiao@vi.net>
> > To: "Chuck Church" <cchurch@MAGNACOM.com>
> > Cc: "Lyndon Guo" <lyndon@vip.sina.com>; <ccielab@groupstudy.com>; "Phil"
> > <ciscostudent1@yahoo.com.br>; "Bob Rech" <brech@kc.rr.com>; "Ahamed
> > Maideen"
> > <asadayan@cisco.com>
> > Sent: Friday, September 27, 2002 11:44 AM
> > Subject: RE: VTP
> >
> >
> > > Thanks for your reply.
> > >
> > > I wish that I could have contral on Switch 11 and 12. In fact they are
> > not
> > our CPE.
> > > If the VTP stuff can't work the way as I said, we have to pay an arm and
> > leg for a inter-floor link, or set up 2 vtp domains, involving network
> > changing...
> > >
> > > I heard from my colleague from his friend's friend that it might work. I
> > think the best way to verify it is to do an experiment.
> > >
> > > Does someone have spare switches and could be kindly do a test?
> > >
> > > Cheers,
> > > Weidong
> > >
> > >
> > >
> > > > -----Original Message-----
> > > > From: Chuck Church [mailto:cchurch@MAGNACOM.com]
> > > > Sent: 27 September 2002 15:46
> > > > To: Weidong Xiao; 'Phil'; 'Bob Rech'; 'Ahamed Maideen'; 'Lyndon Guo'
> > > > Cc: 'ccielab@groupstudy.com'
> > > > Subject: RE: VTP
> > > >
> > > >
> > > > Why not just leave all connections as trunks, and make
> > > > switches 11 and 22
> > > > VTP transparent? That way they'll forward the VTP
> > > > advertisements unchanged.
> > > > I'm assuming from the drawing that 11 and 22 are both in domain 2. If
> > > > either 11 or 22 need to be a client or server, I don't think
> > > > it'll ever
> > > > work. VTP is a special kind of packet, like CDP. A Cisco
> > > > device won't just
> > > > switch/route it like a normal frame/packet. They get send to
> > > > the CPU. If a
> > > > VTP advertisement's domain doesn't match your domain, it's
> > > > ignored and not
> > > > forwarded.
> > > >
> > > > Chuck Church
> > > > CCIE #8776, MCNE, MCSE
> > > > Sr. Network Engineer
> > > > Magnacom Technologies
> > > > 140 N. Rt. 303
> > > > Valley Cottage, NY 10989
> > > > 845-267-4000
> > > >
> > > >
> > > >
> > > > -----Original Message-----
> > > > From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
> > > > Weidong Xiao
> > > > Sent: Friday, September 27, 2002 8:25 AM
> > > > To: Phil; Bob Rech; Ahamed Maideen; Lyndon Guo
> > > > Cc: ccielab@groupstudy.com
> > > > Subject: RE: VTP
> > > >
> > > >
> > > > Thanks you all for your reply, but I still think there may be
> > > > a chance for
> > > > it to work.
> > > >
> > > > Say, SW1 send a frame to Sw11, ISL encapsulated. The
> > > > beginning of this frame
> > > > is a 26 bytes ISL header, and the beginning of this ISL header is
> > > > destination address field. This address is a multicast
> > > > address and is set
> > > > at "0x01-00-0C-00-00" or "0x03-00-0c-00-00". The next field
> > > > in ISL header is
> > > > Type Field, for ethernet, it's always 0000. So, from Sw11
> > > > (vlan8 port)point
> > > > of view , the first 48 bits of the frame it received is
> > > > "0x01-00-0C-00-00-00" or "0x03-00-0c-00-00-00". This is a
> > > > multicast mac
> > > > address, if the Sw11 port is doing cut-through switching (or whatever
> > > > switching), the port should flood it all over vlan8, so the
> > > > frame should be
> > > > able to arrive SW2.
> > > >
> > > > Does this make sense?
> > > >
> > > > Thank you very much,
> > > > Weidong
> > > >
> > > > p.s.
> > > > URL about isl encapsulation frame format:
> > > > http://www.cisco.com/warp/public/473/741_4.html
> > > >
> > > >
> > > >
> > > >
> > > > > -----Original Message-----
> > > > > From: Phil [mailto:ciscostudent1@yahoo.com.br]
> > > > > Sent: 26 September 2002 17:31
> > > > > To: Weidong Xiao; ccielab@groupstudy.com
> > > > > Subject: Re: VTP
> > > > >
> > > > >
> > > > > I don't believe it's gonna work. VTP, as the name states
> > > > > (Vlan Trunk Protocol) is supposed to run on trunks.
> > > > >
> > > > > Weidong Xiao <Weidong.Xiao@vi.net> escreveu: Hello,
> > > > >
> > > > > SW1----------------Sw11--Sw22-----------SW2
> > > > > (domain1,server) (domain2) (domain1,client)
> > > > >
> > > > > I have four switches belonging to 2 domains, topoly is as
> > > > > above. Is it possible for vlan information propagate from SW1
> > > > > to SW2? If I create a vlan (say,vlan8)in domain2, can I deem
> > > > > vlan8 just as a wire, and it should transport vtp info?
> > > > >
> > > > > Cheers,
> > > > > Weidong
> > > > >
> > > > >
> > > > > ---------------------------------
> > > > > Yahoo! GeoCities
> > > > > Tudo para criar o seu site: ferramentas faceis de usar,
> > > > > espago de sobra e acesssrios.

-- 
David Madland
CCIE# 2016
Sr. Network Engineer
Qwest Communications
612-664-3367

"You don't make the poor richer by making the rich poorer." --Winston Churchill



This archive was generated by hypermail 2.1.4 : Tue Nov 05 2002 - 08:35:36 GMT-3