VLAN Trunking Protocol (VTP)

1. Introduction to VTP

Managing VLANs across multiple switches can quickly become a nightmare.

VTP (VLAN Trunking Protocol) helps you automate VLAN distribution, saving time and preventing mistakes.

VLAN Trunking Protocol configuration diagram showing SW1 as VTP Server sending VLAN advertisements to SW2, SW3, and SW4 as VTP Clients.

In this lesson, you’ll learn how VTP works, how to configure it and how to troubleshoot common issues.

Why is VTP Important?

As a network administrator, maintaining a structured and scalable VLAN configuration is crucial. VTP helps by:

  • Reducing Manual Work – Configure VLANs centrally and let VTP handle the rest.
  • Ensuring Consistency – Prevent misconfigurations by automatically synchronizing VLAN IDs and names.
  • Scaling Easily – As your network expands, adding or removing VLANs becomes effortless.

These benefits show why a proper vlan trunking protocol configuration is critical for any scalable switching infrastructure 🙂

2. VTP Modes

To manage VLANs efficiently across multiple switches, VTP uses three distinct modes.
Each mode determines how a switch handles VLAN information within a VTP domain.

Server Mode

A switch in Server Mode acts as the central VLAN controller. It’s the only type of switch allowed to create, modify or delete VLANs.

VTP Server Mode diagram showing VLAN Trunking Protocol configuration where SW1 creates, modifies, and deletes VLANs for SW2, SW3, and SW4 clients.

Summary:

  • Can create, modify, and delete VLANs
  • Sends VLAN updates to all other switches
  • Central authority for VLAN management

Client Mode

A switch in Client Mode cannot make any changes to VLANs. It simply receives updates from the VTP server and applies them.

VLAN Trunking Protocol configuration showing VTP Server SW1 sending advertisements to VTP Clients SW2, SW3, and SW4, which cannot create or modify VLANs.

Summary:

  • Cannot create, modify, or delete VLANs
  • Receives VLAN updates from the server
  • Keeps VLAN configuration consistent across the domain

Transparent Mode

A switch in Transparent Mode does not participate in VLAN synchronization. It keeps its own local VLAN configuration but still forwards VTP advertisements to other switches.

VLAN Trunking Protocol configuration with SW2 in VTP Transparent mode forwarding advertisements from VTP Server SW1 to VTP Clients SW3, SW4, and SW5 without applying them.

Summary:

  • Maintains its own VLAN database
  • Does not synchronize with the VTP server
  • Forwards VTP messages without applying them

Transparent Mode is useful when you want a switch to have its own VLANs without affecting the rest of the network, while still allowing VTP to pass through.

3. VTP Versions

VTP (VLAN Trunking Protocol) has evolved over time to support more complex and scalable network environments. Each version introduces new capabilities that affect how VLAN information is managed across switches.

VTP Version 1 (Released in 1996)

  • Initial version of the protocol
  • Supports VLAN IDs 1 to 1005
  • Basic VLAN propagation over trunk links
  • No support for extended VLANs (1006–4094)
  • No security or authentication features

VTP Version 2 (Released in 1998)

  • Adds Token Ring VLAN support (obsolete today)
  • Improves consistency and reliability between switches
  • Still limited to VLANs 1 to 1005
  • Minor improvements over Version 1

VTP Version 3 (Released in 2010)

  • Major upgrade for enterprise-scale networks
  • Supports VLAN IDs 1 to 4094
  • Adds Private VLAN support
  • Allows authentication using passwords
  • Introduces MST (Multiple Spanning Tree) support
  • Adds Primary and Secondary server roles

Version Comparison Summary

FeatureVTPv1 / VTPv2VTPv3
VLAN Range1–10051–4094
Private VLAN SupportNoYes
Extended VLAN SupportNoYes
Password AuthenticationNoYes
Server Roles (Primary/Sec.)NoYes
Token Ring VLAN SupportOnly in v2No

Which Version Should You Use?

  • VTPv1 or VTPv2 are suitable for basic environments or labs
  • VTPv3 is the recommended version for production networks due to its extended capabilities and security

You do not need to memorize the release dates for the CCNA exam.
They’re included here only to provide a chronological perspective on how the protocol has evolved.

4. Configuring VTP

Now that you understand how VTP works, let’s see how to configure vlan trunking protocol using Cisco CLI.

By setting up VTP, you ensure VLAN consistency without having to manually update each switch.

VLAN Trunking Protocol configuration showing SW1 as VTP Server, SW2 in Transparent mode, and SW3 to SW5 as Clients in the CompanyNetwork VTP domain.

Setting Up SW1 (VTP Server)

The VTP Server is the central VLAN manager, responsible for creating, modifying and distributing VLANs throughout the network.

SW1> enable
SW1# configure terminal
SW1(config)# vtp domain CompanyNetwork       
SW1(config)# vtp mode server                 
SW1(config)# vtp version 2  

In Server mode, SW1 manages VLANs and ensures that all connected Client switches receive the latest VLAN updates.

Configuring SW2 (VTP Transparent Mode)

Switches in Transparent mode do not sync VLAN updates from the VTP Server. However, they can forward VTP messages to other switches, ensuring that updates continue to propagate across the network.

SW2> enable
SW2# configure terminal
SW2(config)# vtp domain CompanyNetwork       
SW2(config)# vtp mode transparent                 
SW2(config)# vtp version 2  

💡 When using Transparent mode, VLANs configured on this switch will not be shared with others in the VTP domain, but it will still forward VTP messages.

Configuring SW3, SW4, and SW5 (VTP Clients)

Switches in Client mode receive VLAN information from the VTP Server but cannot create, modify, or delete VLANs.

Switch> enable
Switch# configure terminal
Switch(config)# vtp domain CompanyNetwork      
Switch(config)# vtp mode client
Switch(config)# vtp version 2

Client mode ensures that VLAN configurations remain consistent across the network, but these switches cannot modify VLANs themselves.

5. VTP Revision Number

The VTP revision number ensures that switches in a VTP domain apply the latest VLAN configuration. Let’s break this down to understand its importance.

Why the Revision Number Matters

Think of the revision number as a version tracker for VLAN changes. Whenever the VTP Server makes a change, the revision number increases, signaling clients to update their configurations.

  1. Tracking Updates – Each VLAN change on the VTP Server increases the revision number by 1.
  2. Applying Updates – When VTP Clients receive an update with a higher revision number than their own, they apply the change to stay synchronized.
  3. Preventing Outdated Configurations – If the advertisement has a revision number equal to or lower than the current one, the client ignores it to prevent applying outdated information.

This process helps maintain VLAN consistency across the network.

Initial State (Before Synchronization)

At the start:

  • The VTP Server (SW1) is configured with a revision number of 5, representing the latest VLAN configuration.
  • The VTP Clients (SW2 and SW3) have a revision number of 4, meaning they are one step behind and need to synchronize with the server.
Diagram showing initial VTP state with SW1 as the server having revision number 5, and SW2 and SW3 as clients with outdated revision number 4.

This mismatch indicates that SW2 and SW3 are not yet updated with the most recent VLAN changes made on SW1.

Synchronization Process in the VTP Environment

When the VTP Server (SW1) sends out an advertisement with a revision number of 5, the following happens:

  1. Comparison of Revision Numbers
    SW2 and SW3 compare the incoming revision number (5) from SW1 with their current revision number (4).
  2. Update Trigger
    Since the incoming revision number is higher, SW2 and SW3 recognize it as the most recent configuration.
  3. Configuration Update
    SW2 and SW3 apply the VLAN updates from SW1, bringing their configurations in line with the server.

State After Synchronization

After the synchronization process:

  • SW2 and SW3 now display a revision number of 5, indicating they are fully updated with the VTP Server’s VLAN configuration.
  • All switches in the domain are now consistent with the latest VLAN settings.
Diagram showing the updated VTP state where the server SW1 and clients SW2 and SW3 all have revision number 5, indicating synchronization.

This ensures uniform VLAN management across the network, reducing errors and simplifying administration.

Best Practice: Resetting the Revision Number

When reintroducing a switch into an existing VTP domain, it’s critical to reset its revision number to 0 to prevent potential configuration conflicts. This avoids situations where a switch with a high revision number inadvertently overrides the current VLAN configuration in the network.

6. Basic Troubleshooting of VTP

The show vtp status command provides detailed information on a switch’s VTP configuration, which helps verify consistency across the network.

Switch# show vtp status
VTP Version                     : 2
Configuration Revision          : 5
Maximum VLANs supported locally : 1005
Number of existing VLANs        : 10
VTP Operating Mode              : Client
VTP Domain Name                 : CompanyNetwork
VTP Pruning Mode                : Disabled
VTP Traps Generation            : Disabled
MD5 digest                      : 0x57 0x64 0x2E 0x89 0x6F 0x7D 0x8A 0xA0
Configuration last modified by 192.168.1.1 at 12-2-23 10:31:44
VTP Version running             : 2

From this output, we can gather critical information, such as:

  • VTP Version – Indicates which version of VTP the switch is running (Version 2 in this case).
  • Configuration Revision – Shows the VLAN configuration version (5 here).
  • VTP Operating Mode – Displays the switch’s VTP mode (Client mode).
  • VTP Domain Name – Confirms the VTP domain name in use.
  • VTP Pruning Mode – Shows whether VTP Pruning is enabled or disabled.

Common VTP Issues and CLI Solutions

After confirming the switch’s VTP settings with show vtp status, here’s how to handle typical VTP issues that might arise.

Mismatched Domain Names

  • Issue – If switches in the same VTP domain have mismatched domain names, they won’t share VLAN information.
  • Solution – Ensure all switches are configured with the same VTP domain name:
Switch(config)# vtp domain CompanyNetwork

Incorrect VTP Mode

  • Issue – If a switch is in Transparent mode, it won’t apply VLAN updates from the VTP Server. Similarly, Client switches require at least one Server in the domain to propagate changes.
  • Solution – Verify and correct the VTP mode:
Switch(config)# vtp mode client

Revision Number Conflicts

  • Issue – If a switch with outdated VLAN configurations has a higher revision number than the VTP Server, it may overwrite the current network configuration.
  • Solution – Reset the revision number to 0 before adding the switch to the network:
Switch# delete flash:vlan.dat
Switch# reload

Once these issues are resolved, your vlan trunking protocol configuration is ready.

7. Conclusion

You’ve made it! 🎉 Now you understand VTP and how it simplifies VLAN management by automating updates across your network. Instead of manually configuring VLANs on each switch, VTP keeps everything in sync—saving time and preventing errors.

What You Should Remember

VTP Modes

  • VTP Server Mode: The main controller—creates, modifies, and distributes VLANs.
  • VTP Client Mode: Follows orders—receives VLAN updates but can’t make changes.
  • VTP Transparent Mode: Independent—ignores updates but forwards VTP messages to other switches.

VTP Versions

  • VTPv1 & VTPv2: Support VLANs 1–1005 with basic synchronization.
  • VTPv3: Adds support for VLANs 1006–4094, stronger security, and private VLANs.

VTP Revision Number

  • Acts as a version tracker—higher numbers mean newer VLAN updates.
  • Be careful! If a switch has an outdated VLAN setup but a higher revision number, it could overwrite the network. Reset it before reconnecting!

Troubleshooting VTP

  • Use show vtp status to verify your settings.
  • Wrong VTP mode or domain? VLANs won’t sync.
  • Mismatched revision numbers? Reset the switch before adding it to a network.

Final Tip 🚀

VTP is a powerful tool, but it requires careful configuration to avoid unexpected VLAN changes. Always double-check your settings, and when in doubt, reset the revision number before adding a switch to a VTP domain.