[an error occurred while processing this directive]

Support

Implementing VLANs in Your Ethernet Network

 Feedback

Table Of Contents

Implementing VLANs in Your Ethernet Network

What You Need—Prerequisites

How to Do It—Procedure

Create an Ethernet VLAN

Add End-User Ports to the VLAN

Enable or Disable the VLAN on a Trunk

Where You Should End Up—Verification


Implementing VLANs in Your Ethernet Network


As a network administrator for a company, you are constantly looking for ways to improve your network manageability, performance, and security. You have done some research and have learned about the benefits of VLANs: simplification of moves, adds, and changes; controlled broadcast activity; and workgroup and network security (see VLANs).

In this scenario, let's assume the network configuration consists of ten LAN switches and several VLANs in a VTP domain called "North Carolina." You can use Topology Services to help you manage these VLANs and create additional VLANs easily.


Note The network design used in this scenario is intended to illustrate how to use Campus Manager applications to manage your network, not as guidelines for how to design your network. Consult the network design guidelines for that type of information.


This scenario focuses on creating a new Ethernet VLAN and moving port into this VLAN. To create a Token Ring VLAN, the steps are essentially the same; however the menu options are different. Refer to the Topology Services online help for the procedure for creating Token Ring VLANs.

To create the Ethernet VLAN as described in this scenario, refer to these sections:

What You Need—Prerequisites

How to Do It—Procedure

Where You Should End Up—Verification

What You Need—Prerequisites

VTP must be implemented in your network and you must have at least one VTP server established. In this particular network scenario, there are two VTP servers, three VTP clients, and five switches in VTP transparent mode. See "VTP Domains" in "Managing Physical and Logical Network Services with Topology Services." You should also check for discrepancies in your network. See Figure 6-1 for an network diagram of the North Carolina VTP domain.

To do this, follow these steps:


Step 1 From the CiscoWorks2000 desktop, select Campus Manager > Administration > Network Discrepancies.

Step 2 Select Campus Manager > Topology Services  >  Reports > Discrepancies.

Make sure that the discrepancies that you are interested in are being collected. If you find discrepancies, you should resolve them before proceeding. Once you believe you have resolved the discrepancies, you should rediscover the network and check for discrepancies again. Continue this process until all discrepancies have been resolved.


Figure 6-1 North Carolina VTP Domain Network Configuration

How to Do It—Procedure

Use these procedures to implement VLANs in your network:

1. Create an Ethernet VLAN

2. Add End-User Ports to the VLAN

3. Enable or Disable the VLAN on a Trunk

Create an Ethernet VLAN

To create an Ethernet VLAN:


Step 1 Select Campus Manager > Topology Services to launch Topology Services.

Step 2 Select Managed Network > VTP Domains. The Ethernet VLAN you create depends on what you select in the Tree View:

If you select a VTP domain folder, the VLAN will be created on a VTP server in that VTP domain (to include this VLAN on all switches configured as VTP transparent, check the Create VLAN on all Transparent Switches check box.) The VLAN information will be propagated throughout the VTP domain.

If you select a VTP domain folder with an IP address appended to it (denoting a switch in transparent mode), the VLAN will be created only on that switch.

Step 3 For this scenario, select the North Carolina domain.

Step 4 Select Tools > VLAN Management > Create > Ethernet... from the menu. A window similar to the one shown in Figure 6-2 appears.

Step 5 Refer to Table 6-1 for help filling in the required information.


Figure 6-2 Create Ethernet VLAN Window

Table 6-1 Create Ethernet VLAN Window Fields

Field
Description

VTP Domain

Displays the name of VTP domain that you have selected. The VLAN will be created in this VTP domain.

VLAN Name

Topology Services provides a default VLAN name that follows a naming convention. The naming convention used for Ethernet VLANs in Topology Services is vlan[vlan index], for example, vlan65. You can accept the default name or enter another name. VLAN names must be unique.

VLAN Index

ANI Server computes the next available VLAN index. You can accept this VLAN index number or change the VLAN index to a number between 1 and 1024 (that is currently not used). VLAN Index numbers must be unique.

If you change the VLAN index number and you are using a naming convention that reflects the index number, make sure to update the VLAN name to reflect the new index number.

Purpose

Enter a word or phrase that describes the purpose of the VLAN.

Description

Describe the contents of the VLAN.

Create VLAN on all Transparent Switches

Check this box to include this VLAN on switches configured as VTP transparent.

LANE Services...

Initially, this button is greyed out. After you click Apply and successfully create a VLAN, this button is active if you have a network that contains ATM devices.

Click this button to create an ATM-VLAN. To create a standard Ethernet VLAN, do not click this button.


Add End-User Ports to the VLAN

After you have successfully created the VLAN in the North Carolina VTP domain, you can now add end-user ports (non-trunking ports) from one or more devices to this VLAN. To add ports to the VLAN:


Step 1 Select the domain from the Tree View. In this case, select the North Carolina domain.

Step 2 Select Tools > Port VLAN Assignment... from the menu.

Step 3 Select the appropriate search criteria from the drop down list boxes and enter the search string. For example, you can perform a search using the names of the devices from which you wish to include ports. In this case, you perform a search for devices whose names contain 172.20.126.

Step 4 Click Find. Ports that match the search criteria will be displayed.

Step 5 Select the ports you want to move. To select multiple ports, press the Ctrl key as you click on rows of ports; to select contiguous ports by press the Shift key as you click on rows of ports.

If you are selecting ports from a switch that is in transparent mode, the VLAN that you are moving the ports to must exist on that switch.

Step 6 Select the VLAN you just created (vlan65) from the drop down list box for the Move selected ports to: field.

Step 7 Click Move. The ports are moved to the selected VLAN. See Figure 6-3 for an example of the Port VLAN assignment window.


Figure 6-3 Port VLAN Assignment Window

Enable or Disable the VLAN on a Trunk

When you create a VLAN, trunks might be automatically included if the trunk has been configured to allow the index number for the VLAN you just created. For example, if the range of VLAN index numbers is from 1 to 1024, and you create a VLAN with an index number 65, which falls within that range, the trunk is automatically included on VLAN 65. You might need to enable or disable the VLAN on a trunks to fit the configuration you desire. In this scenario, you will enable the VLAN on a trunk. To enable a VLAN on a trunk:


Step 1 Select the domain from the Tree View. In this case, select the North Carolina domain.

Step 2 Select Tools > Port VLAN Assignment... from the menu.

Step 3 Select the appropriate search criteria from the drop down boxes and enter the search string. For example, you can perform a search using the names of the devices from which you wish to include ports. In this case, you perform a search for devices whose names contain 172.20.126.

Step 4 Click Find. Ports that match the search criteria will be displayed.

Step 5 Select the trunk to which you want to add the VLAN. If you have access privileges to modify the parameters for the trunk, the Trunk Report... button is activated.

Step 6 Click Trunk Report....

Step 7 In the Allow VLAN(s) field, enter the index number of the VLAN you want to add to the trunk port.

Step 8 Click Apply.


Where You Should End Up—Verification

To confirm the creation of the VLAN and the VTP configuration:


Step 1 Select Campus Manager > Topology Services > Managed Views > VTP Domains > VTP Domain name > VLAN name. In this case, you choose the North Carolina VTP domain and VLAN 65. Observe that the VLAN you just created appears under the selected VTP domain folder.

See Figure 6-4 for an example of this information which is shown in the VLAN Summary window.

Step 2 Click on the VLAN name in the VTP domain folder. Notice that all of the ports you just added are displayed. In addition, you will see ports that are trunking this VLAN (Figure 6-4).


Figure 6-4 VLAN Summary Window


[an error occurred while processing this directive]