# VLAN & Bridge

Device > Configure > VLAN & Bridge

Virtual LANs (VLANs) allow you to logically group resources independent of their physical location. This arrangement of resources, and the ports to which they are attached, is called a logical grouping. A logical group of ports is called a VLAN. Ports or groups of ports in a VLAN are called members. VLANs isolate all traffic, including broadcasts and multicasts, from being propagated to members of other VLANs. A Token Ring VLAN comprises Token Ring Bridge Relay Functions (trBRFs) and Token Ring Concentrator Relay Functions (trCRFs).

Note: Extended range VLAN values (1-4094) are supported by devices running Catalyst OS version 7.2 or later.

If the switches are interconnected by a port called an Inter-Switch Link (ISL), you can specify which VLANs are allowed to flow through the ISL.

You can use the VLAN & Bridge option to configure and view VLANs and their members.

To view the definition for a particular MIB variable, click the appropriate link from the following list:

- VLAN Number (vtpVlanIndex)

- VLAN Name (vtpVlanName)

- VLAN Type (vtpVlanType)

- VLAN State (vtpVlanState)

The following list specifies buttons in this dialog box, as well as their function:

- Click OK to continue.

- Click Apply to save the changes in the dialog box.

- Click Cancel to close the dialog box.

- Click Refresh to update the contents of the dialog box.

- Click Print to print the contents of the dialog box.

- Click Help to access online help.

VLAN Number (vtpVlanIndex)

VLAN ID of this VLAN. Accepted values are as follows:

- for Catalyst 4000 devices running Catalyst OS version 7.1 or earlier, 2 through 1,000.
- for Catalyst 4000 devices running Catalyst OS version 7.2 or later and Catalyst 6000 devices running Catalyst OS version 6.1 or later, 2 through 1,000 and 1025 through 4094.

Consult your hardware user guide for more information on appropriate VLAN numbers.

VLAN Name (vtpVlanName)

ASCII name associated with the VLAN; synonymous with the VLAN’s emulated LAN name on LAN emulation (LANE) trunks.

VLAN Type (vtpVlanType)

Possible VLAN Type values: ethernet, Fiber Distributed Data Interface (fddi), tokenRing (trCRF), fddiNet, trNet (trBRF).

VLAN State (vtpVlanState)

Current state of the VLAN. Possible values are Operational and Suspended. VLANs in Operational state are functional. VLANs in Suspended state do not pass packets.

## Button Options

The View Ports buttons at the upper right of the dialog box have the following functions:

VLAN Members

To display the ports on the switch that belong to a specified VLAN, select the number of the VLAN for which you want to display members, then click VLAN Members. The ports that belong to the VLAN are highlighted on the device display. The count includes both logical and physical ports, but CiscoView does not highlight the logical ports.

Inter Switch

To display ports in a VLAN shared across switches, click Inter Switch.

Clear Ports

To clear the highlighting, click Clear Ports.

VLAN Non-Trunk Members

To highlight the ports on the switch that belong to a specified VLAN but are not trunk ports, select the number of the VLAN for which you want to display member, then click VLAN Non-Trunk Members.

The Bridge buttons have the following functions:

Configure

Forwarding (This option is not available for trBRFs.)

Static (This option is not available for trBRFs or trCRFs.)

The VTP-VLAN buttons at the bottom of the dialog box allow you to perform the following tasks with VLANs:

Local Mgmt Domain

Create VLAN

Delete VLAN

Modify/View VLAN

Assign a Port to VLAN

To move a port to a different VLAN, drag the port with the middle mouse button (the left button for PC users) pressed and release it when the mouse pointer is over the desired entry in the VLAN table. To select multiple ports, select the first port as usual and then hold down the CONTROL key as you select additional ports.

# Token Ring VLANs

Within a Token Ring virtual LAN (VLAN), distributed rings can be formed by defining groups of ports that have the same ring number. The IEEE calls such a port group a Token Ring Concentrator Relay Function (trCRF). A trCRF is limited to the ports in a single Catalyst 5000 series switch.

Within the trCRF, source-route switching is used for forwarding based on either MAC addresses or route descriptors. If desired, the entire VLAN can operate as a single ring. Frames can be switched between ports within a single trCRF.

Multiple trCRFs can be interconnected using a single Token Ring Bridge Relay Function (trBRF). For source routing, the switch appears as a single bridge between the logical rings. The trBRF can function as a source-route bridge (SRB) or source-route transparent (SRT) bridge running either the IBM or IEEE Spanning-Tree Protocol. If SRB is used, duplicate MAC addresses can be defined on different distributed rings.

To accommodate SNA traffic, you can use a combination of SRT and SRB modes. In a mixed mode the trBRF considers some ports (internal ports connected to trCRFs) to be operating in SRB mode while others are operating in SRT mode.

The trBRF can be extended across a network of switches via high-speed uplinks between the switches. These links must have the ability to multiplex multiple VLANs and provide the necessary information to support logical rings.

# Configure

To access this dialog box:

1. Select Device > Configure > VLAN & Bridge.
2. With a VLAN selected, click Configure.

Most of the configuration required in bridging is related to the Spanning Tree Algorithm. The Spanning Tree Algorithm allows the connected network topology to contain multiple physical paths between two stations, but constrains the active topology to be a single-span tree. If a port on one bridge fails, the other bridges can reconfigure the topology and switch traffic over to new paths.

If the Spanning Tree feature is not enabled, no backup path exists to maintain bridge connectivity.

To view the definition for a particular MIB variable, click the appropriate link from the following list:

- Base Bridge Address (dot1dBaseBridgeAddress)
- Type (dot1dBaseType)
- Learned Entries (dot1dTpLearnedEntryDiscards)
- Aging Time (dot1dTpAgingTime)
- Protocol Specification (dot1dStpProtocolSpecification)
- STP Priority (dot1dStpPriority)
- Last Topology Change (dot1dStpTimeSinceTopologyChange)
- Topology Changes (dot1dStpTopChanges)
- Designated Root (dot1dStpDesignatedRoot)
- Root Cost (dot1dStpRootCost)
- Root Port (dot1dStpRootPort)
- STP Max Age (dot1dStpMaxAge)
- STP Hello Time (dot1dStpHelloTime)
- STP Hold Time (dot1dStpHoldTime)
- STP forward delay (dot1dStpForwardDelay)
- STP Max Age (secs) (dot1dStpBridgeMaxAge)
- STP Bridge Hello Time (secs) (dot1dStpBridgeHelloTime)
- STP Forward Delay (secs) (dot1dStpBridgeForwardDelay)

The following list specifies buttons in this dialog box, as well as their function:

- Click OK to continue.

- Click Apply to save the changes in the dialog box.

- Click Cancel to close the dialog box.

- Click Refresh to update the contents of the dialog box.

- Click Print to print the contents of the dialog box.

- Click Help to access online help.

Base Bridge Address (dot1dBaseBridgeAddress)

MAC address of the bridge.

Type (dot1dBaseType)

Type of bridging that this bridge can do. The possible values are unknown, transparent-only, sourceroute-only, and srt (source route transparent bridging).

Learned Entries (dot1dTpLearnedEntryDiscards)

Number of Forwarding Database entries that have been or would have been learned but were discarded because of lack of space.

Aging Time (dot1dTpAgingTime)

Timeout value in seconds after which dynamically-learned forwarding information is removed from the bridge’s forwarding database. Possible values range from 10 through 1,000,000 seconds, and the recommended default is 300 seconds.

Protocol Specification (dot1dStpProtocolSpecification)

Version of the Spanning Tree Protocol being used. The possible values are unknown, decLb100, or ieee80221d. The unknown value usually indicates an error.

STP Priority (dot1dStpPriority)

Integer that is the first two octets of the bridge identifier.

Last Topology Change (dot1dStpTimeSinceTopologyChange)

Date and time that the last topology change was made.

Topology Changes (dot1dStpTopChanges)

Total number of topology changes by this bridge since it was last reset or initialized.

Designated Root (dot1dStpDesignatedRoot)

Bridge identifier of the node that this bridge indicates is the current root of the spanning tree.

Root Cost (dot1dStpRootCost)

Integer that represents the total cost of the best path to the root.

Root Port (dot1dStpRootPort)

Port number through which the lowest-cost path to the root is accessed.

STP Max Age (dot1dStpMaxAge)

Timeout value for STP information learned from the network. After this interval, information that has not been refreshed will be discarded.

STP Hello Time (dot1dStpHelloTime)

Interval for sending configuration bridge PDUs if the bridge is the root or is trying to become the root.

STP Hold Time (dot1dStpHoldTime)

Interval at which a maximum of two configuration bridge PDUs are transmitted by this node.

STP forward delay (dot1dStpForwardDelay)

Time for this port to spend in each of the listening and learning states in preparation for going into the forwarding state.

STP Max Age (secs) (dot1dStpBridgeMaxAge)

Value that all bridges use for the maximum age timeout when this bridge is the root. Possible values are from 6 to 40 seconds.

Note: If the device is in MISTP mode, Bridge Max Age (dot1dStpBridgeMaxAge) can not be set on a per VLAN basis.

STP Bridge Hello Time (secs) (dot1dStpBridgeHelloTime)

Interval that all bridges use for hello time when this bridge is the root. Possible values are from 1 to 10 seconds.

Note: If the device is in MISTP mode, Bridge Hello Time (dot1dStpBridgeHelloTime) can not be set on a per VLAN basis.

STP Forward Delay (secs) (dot1dStpBridgeForwardDelay)

Value used by all bridges for the forward delay interval when this bridge is the root bridge. Possible values are from 4 to 30 seconds.

Note: If the device is in MISTP mode, Bridge Forward Delay (dot1dStpBridgeForwardDelay) can not be set on a per VLAN basis.

# Forwarding

To access this dialog box:

1. Select Device > Configure > VLAN & Bridge.
2. With a VLAN selected, click Forwarding.

This dialog box displays bridge forwarding information for this device.

To view the definition for a particular MIB variable, click the appropriate link from the following list:

- Forwarding Address (dot1dTpFdbAddress)
- Forwarding Port (dot1dTpFdbPort)
- Forwarding Status (dot1dTpFdbStatus)

The following list specifies buttons in this dialog box, as well as their function:

- Click OK to continue.

- Click Apply to save the changes in the dialog box.

- Click Cancel to close the dialog box.

- Click Refresh to update the contents of the dialog box.

- Click Print to print the contents of the dialog box.

- Click Help to access online help.

Forwarding Address (dot1dTpFdbAddress)

Unicast MAC address of destinations that are reachable by the port.

Forwarding Port (dot1dTpFdbPort)

Port to which frames with that destination MAC address should be forwarded.

Forwarding Status (dot1dTpFdbStatus)

How the entry or destination became known to the bridge. Possible values are learned, self, mgmt, or other. Learned information can include both dynamic and static entries. Self indicates the MAC address of a port on this bridge. Mgmt means that this address is in the static table or database for the bridge.

# Static

To access this dialog box:

1. Select Device > Configure > VLAN & Bridge.
2. With a VLAN selected, click Static.

The bridge static table displays forwarding information that has been manually configured on the bridge. The table shows the destination address, the port through which the bridge will forward traffic to that destination, and the status of the entry.

To view the definition for a particular MIB variable, click the appropriate link from the following list:

- Static Address (dot1dStaticAddress)
- Receiving Port (dot1dStaticReceivePort)
- Port Number (dot1dStaticAllowedToGoTo)
- Static Status (dot1dStaticStatus)

The following list specifies buttons in this dialog box, as well as their function:

- Click OK to continue.

- Click Apply to save the changes in the dialog box.

- Click Cancel to close the dialog box.

- Click Refresh to update the contents of the dialog box.

- Click Print to print the contents of the dialog box.

- Click Help to access online help.

Static Address (dot1dStaticAddress)

Destination MAC addresses that have been added to the database or table and to which the filtering/VLAN information applies. A MAC address consists of 6 bytes. The first three bytes identify the vendor.

Receiving Port (dot1dStaticReceivePort)

Port number from which a frame must be received for filtering to occur. The value 0 indicates that frames can be received from all ports on the bridge. For example, 1.6 means that card 1, port 6 is forwarding information for this port.

Port Number (dot1dStaticAllowedToGoTo)

Set of ports through which forwarding is allowed. For example, the entry 1, 3, 7-10 indicates that ports 1, 3, 7, 8, 9, and 10 forward information for this port.

Static Status (dot1dStaticStatus)

Whether the entry is permanent or which conditions cause it to be removed. Possible values are permanent, deleteOnReset, deleteOnTimeout, or other.

# Local Mgmt Domain

To access this dialog box:

1. Select Device > Configure > VLAN & Bridge.
2. With a VLAN selected, click Local Mgmt Domain.

To view the definition for a particular MIB variable, click the appropriate link from the following list:

- Management Domain Index (managementDomainIndex)
- Management Domain Name (managementDomainName)
- Working Mode of Local System (managementDomainLocalMode)
- Configuration Revision Number (managementDomainConfigRevNumber)
- Revision Number Last Updater (managementDomainLastUpdater)
- Revision Number Last Change (managementDomainLastChange)
- VTP Pruning State (managementDomainPruningState)
- Current Version of VTP in use (managementDomainVersionInUse)

The following list specifies buttons in this dialog box, as well as their function:

- Click OK to continue.

- Click Apply to save the changes in the dialog box.

- Click Cancel to close the dialog box.

- Click Print to print the contents of the dialog box.

- Click Help to access online help.

Management Domain Index (managementDomainIndex)

Index value identifying this domain on the local system.

Management Domain Name (managementDomainName)

Management name of a domain in which this system is participating. This value is required.

Working Mode of Local System (managementDomainLocalMode)

Whether the local system is acting as a VTP client or a VTP server in this management domain. A value of transparent indicates that a device cannot support VTP for this domain.

Configuration Revision Number (managementDomainConfigRevNumber)

Current configuration revision number for this management domain.

Revision Number Last Updater (managementDomainLastUpdater)

IP address of the VTP server that last updated the configuration revision number.

Revision Number Last Change (managementDomainLastChange)

Time at which the configuration revision number was last increased to its current value.

VTP Pruning State (managementDomainPruningState)

Displays whether VTP Pruning is enabled or disabled. When enabled, pruning limits the scope of the broadcast traffic across trunk links.

Current Version of VTP in use (managementDomainVersionInUse)

Displays the version number of the current VTP Management Domain.

# Create VLAN

To access this dialog box:

1. Select Device > Configure > VLAN & Bridge.
2. Click Create VLAN.

To view the definition for a particular MIB variable, click the appropriate link from the following list:

- VLAN Number (vtpVlanIndex)
- VLAN State (vtpVlanState)
- VLAN Type (vtpVlanType)
- VLAN Name (vtpVlanName)
- MTU size (vtpVlanMtu)
- 802 10 SAID Field (vtpVlanDot10Said)
- Private VLAN Type (cpvlanVlanPrivateVlanType)
- Primary VLAN (cpvlanVlanAssociatedPrimaryVlan)

The following list specifies buttons in this dialog box, as well as their function:

- Click OK to continue.

- Click Cancel to close the dialog box.

- Click Refresh to update the contents of the dialog box.

- Click Print to print the contents of the dialog box.

- Click Help to access online help.

VLAN Number (vtpVlanIndex)

VLAN ID of this VLAN. Accepted values are as follows:

- for Catalyst 4000 devices running Catalyst OS version 7.1 or earlier, 2 through 1,000.
- for Catalyst 4000 devices running Catalyst OS version 7.2 or later and Catalyst 6000 devices running Catalyst OS version 6.1 or later, 2 through 1,000 and 1025 through 4094.

Consult your hardware user guide for more information on appropriate VLAN numbers.

VLAN State (vtpVlanState)

Current state of the VLAN. Possible values are Operational and Suspended. VLANs in Operational state are functional. VLANs in Suspended state do not pass packets.

VLAN Type (vtpVlanType)

Possible VLAN Type values: ethernet, Fiber Distributed Data Interface (fddi), tokenRing (trCRF), fddiNet, trNet (trBRF).

VLAN Name (vtpVlanName)

ASCII name associated with the VLAN; synonymous with the VLAN’s emulated LAN name on LAN emulation (LANE) trunks.

MTU size (vtpVlanMtu)

Size of the largest MAC-layer data frame that can be transmitted on this VLAN.

802 10 SAID field (vtpVlanDot10Said)

Value of the 802.10 Security Association ID (SAID) field for this VLAN. This number is usually the same as the VLAN number. This field is not displayed when creating a trBRF or trCRF.

Private VLAN Type (cpvlanVlanPrivateVlanType)

VLAN type configured for the Private VLAN feature.

There are four possible values:

- normal
- primary
- isolated
- community

Primary VLAN (cpvlanVlanAssociatedPrimaryVlan)

The VLAN ID of the associated primary VLAN used for the Private VLAN feature if Primary VLAN (cpvlanVlanPrivateVlanType) has the value of isolated(3) or community(4). If Primary VLAN (cpvlanVlanPrivateVlanType) has the value of normal(1) or primary(2), then this object has the value of 0.

# Delete VLAN

To delete a VLAN definition:

1. Select Device > Configure > VLAN & Bridge.
2. With a VLAN selected, click Delete VLAN.

# Modify/View VLAN

To access this dialog box:

1. Select Device > Configure > VLAN & Bridge.
2. With a VLAN selected, click Modify/View VLAN.

To view the definition for a particular MIB variable, click the appropriate link from the following list:

- VLAN Number (vtpVlanIndex)
- VLAN State (vtpVlanState)
- VLAN Type (vtpVlanType)
- VLAN Name (vtpVlanName)
- MTU size (vtpVlanMtu)
- 802 10 SAID Field (vtpVlanDot10Said)
- Private VLAN Type (cpvlanVlanPrivateVlanType)
- Primary VLAN (cpvlanVlanAssociatedPrimaryVlan)

The following list specifies buttons in this dialog box, as well as their function:

- Click OK to continue.

- Click Cancel to close the dialog box.

- Click Refresh to update the contents of the dialog box.

- Click Print to print the contents of the dialog box.

- Click Help to access online help.

VLAN Number (vtpVlanIndex)

VLAN ID of this VLAN. Accepted values are as follows:

- for Catalyst 4000 devices running Catalyst OS version 7.1 or earlier, 2 through 1,000.
- for Catalyst 4000 devices running Catalyst OS version 7.2 or later and Catalyst 6000 devices running Catalyst OS version 6.1 or later, 2 through 1,000 and 1025 through 4094.

Consult your hardware user guide for more information on appropriate VLAN numbers.

VLAN State (vtpVlanState)

Current state of the VLAN. Possible values are Operational and Suspended. VLANs in Operational state are functional. VLANs in Suspended state do not pass packets.

VLAN Type (vtpVlanType)

Possible VLAN Type values: ethernet, Fiber Distributed Data Interface (fddi), tokenRing (trCRF), fddiNet, trNet (trBRF).

VLAN Name (vtpVlanName)

ASCII name associated with the VLAN; synonymous with the VLAN’s emulated LAN name on LAN emulation (LANE) trunks.

MTU size (vtpVlanMtu)

Size of the largest MAC-layer data frame that can be transmitted on this VLAN.

802 10 SAID field (vtpVlanDot10Said)

Value of the 802.10 Security Association ID (SAID) field for this VLAN. This number is usually the same as the VLAN number. This field is not displayed when creating a trBRF or trCRF.

Private VLAN Type (cpvlanVlanPrivateVlanType)

VLAN type configured for the Private VLAN feature.

There are four possible values:

- normal
- primary
- isolated
- community

Primary VLAN (cpvlanVlanAssociatedPrimaryVlan)

The VLAN ID of the associated primary VLAN used for the Private VLAN feature if Primary VLAN (cpvlanVlanPrivateVlanType) has the value of isolated(3) or community(4). If Primary VLAN (cpvlanVlanPrivateVlanType) has the value of normal(1) or primary(2), then this object has the value of 0.