• Shuffle
    Toggle On
    Toggle Off
  • Alphabetize
    Toggle On
    Toggle Off
  • Front First
    Toggle On
    Toggle Off
  • Both Sides
    Toggle On
    Toggle Off
  • Read
    Toggle On
    Toggle Off

Card Range To Study



Play button


Play button




Click to flip

Use LEFT and RIGHT arrow keys to navigate between flashcards;

Use UP and DOWN arrow keys to flip the card;

H to show hint;

A reads text to speech;

43 Cards in this Set

  • Front
  • Back

What are four possible swithport types? Briefly describe.

Access - One VLAN

Trunk - Multiple VLANs

Tunnel - L2 VPN

Dynamic - DTP negotiated

What is the default setting for switchport?

Dynamic Desirable and Trunk Encapsulation negotiate (ISL)

interface x/x

switchport mode dynamic auto

switchport trunk encapsulation negotiation

How to configure port as access port? How to assign to VLAN or VLANs?

Interface x/x

switchport mode access

switchport access vlan 10

Access port can only be assigned to one VLAN.

What are the possible ways a VLAN can be assigned to switchport?

Manually, 802.1x, or VLAN Membership Policy Server

What is a VLAN? What are normal and extended VLANs?

A VLAN logically separates a switch into multiple broadcast domains. Multidestination frames are held to the VLAN and unicast frames are held to MAC address table per VLAN.

VLAN and IP subnet should be 1:1 as a best design practice

Normal VLANs are 1-1005 and Extended are 1-4094. 1002-1005 are for FDDI and TR. 0 and 4095 are not for use.

What are internal VLANs? What VLAN does it start with an how to change that.

Internal VLAN is created when a switch interface is changed to a routed port. It basically the same as an SVI with only that interface in the VLAN. It uses the extended range VLANs. Command below can change that.

vlan internal allocation policy ascending

What is needed to create a VLAN? What else happens when you create a VLAN?

VLAN numerical ID is the only requirement to create a VLAN. But can also have a name.

An STP instance and MAC table are started for the VLAN.

What are the possible operational states? What are the conditions of the ports in these states?

Active and Suspended. Ports in a active state VLAN can function and ports suspended state VLAN cannot function.

How to suspend or activate VLANs?

Can be done globally or in the database.

vlan database

vlan 21 state [active|suspend]

vlan 21

state [active|suspend]

In addition to the states what are some other conditions a VLAN can be in? Which condition is not shown in CLI? Which condition can be configured? Configure it.

Supported (not shown), Unsupported, and shutdown (configurable).

vlan 21


What is the difference between shutdown and suspended?

Shutdown is configured only in global config mode and has local significance. Suspended can be done in global cfg or vlan database and is propagated via VTP.

What are the methods to configure a VLAN? Which is legacy? Which mode has a key restriction?

VLAN database or Global config. VLAN database is the legacy mode. Not all switches support VLAN database any longer. VLAN database can only be configured with VLAN 1-1005 and is stored in flash in VLAN.dat file.

With VTPv1 and v2 what the configuration option for server and transparent mode for all VLANs?

Normal VLAN 1-1005

- server global cfg or vlan database

- transparent global cfg or vlan database

Extended VLANs 1006-4094

-server not able

-transparent global cfg only

With VTPv1 and v2 where are the VLANs stored for server and transparent mode for all VLANs?

Normal VLAN 1-1005

-server vlan.dat

-transparent vlan.dat and running cfg

Extending 1006-4094

-server cannot

-transparent running cfg only

running cfg must be saved to startup cfg

What happens if after reload mode or vtp domain differ between startup cfg and vlan.dat? What mode is this only possible in?

The running cfg is only used to store in transparent mode. It must be copied to startup cfg before reload. The switch will use only the vlan.dat.

What does VTPv3 do differently which simplifies storage and configuration?

Normal and Extended are only configured from global cfg mode (basically switches which support VTPv3 don't support database cfg).

Server stores Normal and Extended are stored in the vlan.dat unlike earlier VTP versions.

Transparent and Off stores in both.

What is the voice VLAN cfg do?

It allows the switch to send via CDP the voice VLAN to the IP phone. IP phone comes with an internal switch for connecting the PC, phone, and switch. With the understanding of the voice VLAN it just tags the phone.

What are the three ways to configure the Voice VLAN?

Really it is two. Separate data and voice or same data and voice. With separate there's the new way and old way.

The combined VLAN requires dot1p which tags with a VLAN 0 and markes the 802.1p in header of 802.1q frames. That is the only way to mark L2 frames.

Configure the old and new way for separate voice and data VLAN?

#new way

interface FastEthernet0/2

switchport access vlan 146

switchport voice vlan 600

#old way

interface FastEthernet0/4

switchport trunk encapsulation dot1q switchport trunk native vlan 146

switchport trunk allowed vlan 146,600 switchport mode trunk

switchport voice vlan 600

spanning-tree portfast trunk

spanning-tree bpdufilter enable

What is the way to configure combined voice and date VLAN?

interface FastEthernet0/6

switchport access vlan 146

switchport voice vlan dot1p

What does the voice vlan command also configure automatically?

It configures spanning-tree portfast

What are the VTP versions and what is the default?

Three VTP versions Version 1, 2, and 3. VTPv1 is the default.

What to VTPv2 add?

Token Ring VLAN, support for TLV (which can contain additional elements), and a VLAN database optimization

What did VTPv3 add?

Changed Serve Role, New Mode, Encrptyed password, sync other information like MST region and Private VLANs, stores all VLANs including extended VLANs in vlan.dat.

What is the danger and misconception with VTP?

The VTP client operates like the server in regards to updating other devices with lower revision numbers. VTP client just doesn't accept changes from CLI.

Will a device in VTP Transparent mode accept and forward updates.

Will never accept. Actually you can't form a trunk because domain names don't match but if negotiation disable then VTP domain name must be in the same domain here to or null for it to "TRANSPARENTLY" forward on. Version doesn't need to match.

If VTP domain is null on one device but present on another what will happen?

The null device will change the VTP domain to the other device's VTP domain name.

What are the VTP messages and functions?

Summary advertisement sent by server and client every 5 minutes and after a change.

Subset advertisement originated by server and client after modifying the VLAN database. Carry full contents of VLAN database. Can carry multiple VLANs but may require multiple messages.

Advertisement Request - Server or Client request the VLAN database after reset or after a summary which includes higher revision number.

Join - sent by client and server every six seconds if pruning is enabled. Identifies if VLAN is active or unused (pruned)

Purpose of VTP revision number

When a change is made to the revision number is updated by 1. The summary along with subset is sent. The other switches will accept if the number is better.

What is the new role in VTPv3? How many can be in this role per domain? How to configure?

There is a concept of primary server. Secondary Servers and Clients only accept updates if they all agree on primary server. Only update are possible on the primary server. Only one possible per feature per domain.

From priv exec mode

vtp primary (feature)

How does the VTPv3 Primary Server improve VTP? What does it mean to be sever for a feature?

Decreases the chance of inadvertent VLAN changes. A new device that comes online with a higher revision number will not change the others if it doesn't agree on primary server, VTP domain name, and VTP password.

There is a primary server for the VLAN feature and MST feature.

What new mode is present in VTPv3? And how is it different from transparent mode?

Mode Off. Off mode can change the local database but doesn't forward VTP messages at all.

What are the methods of pruning? What VLANs are eligible for pruning?

Static pruning with switchport trunk allow command and VTP pruning.

2-1001 are the prune eligible for all VTP versions.

Can VTPv3 prune extended range VLANs?

No it cannot

When you do show int trunk what does it mean if VLAN shows in the "Vlans allowed and active in management domain"?

The VLAN is configured and is allowed on the trunk.

If a VLAN 10 is in spanning tree forwarding state and not pruned what does this means as it relates to pruning?

VLAN 10 was requested by my neighbor.

Why would VLAN 10 be in STP forwarding state and not pruned locally but not on the other side? When will it be in forwarding on both sides?

This happens when my neighbor has asked for a VLAN and I haven't asked for that VLAN.

It will be forwarding on both sides when both neighbors ask.

Me asking doesn't place into forwarding. Only when neighbor asks.

Which version supports clear text and encrypted password? Where was the password available to view in the clear?

VTPv2 supports clear text

VTPv3 supports encrypted

show vtp password and in the VLAN.dat.

How to configure encrypted password? If you have the encrypted string how to configure password?

vtp password password hidden

vtp password encrypted_string secret

If you have configured encrypted password what change is made when promoted to primary server?

You are asked for the password.

Is VTPv3 compatible with VTPv2?

Yes, but VTPv2 must be configured as client. And if VTPv3 detects version 2 it will used VTPv2 messages on the port.

What MAC address is VTP forwarded to?

The same as CDP, DTP, PagP, and UDLD. 01:00:0c:cc:cc:cc

How to disable VTP on interface?

interface g0/1

no vtp