VTP (VLAN Trunking Protocol): v1, v2, v3 and Why It's Dangerous
How VTP propagates VLANs across a domain, the three modes, the revision-number disaster, v1/v2/v3 differences, and why many engineers disable it.
VLAN
Virtual LANs and Layer 2 switching, the foundation of every campus network. Articles tagged VLAN cover fundamentals, trunking, inter-VLAN routing, EtherChannel, troubleshooting, and campus design on Cisco Catalyst switches.
Latest posts — page 2
Per-VLAN Spanning Tree (PVST+ and Rapid-PVST+) Explained
Per-VLAN Spanning Tree explained: PVST+ vs Rapid-PVST+, the sys-id-ext Bridge ID trick, per-VLAN root placement for uplink load balancing, and when to move to MSTP.
VLAN vs VXLAN: The L2 Overlay, Demystified
VLAN vs VXLAN explained: a VLAN tags L2 segments, VXLAN encapsulates them across L3. The 4,094 limit, VTEPs, BGP EVPN, and when you actually need VXLAN.
STP and EtherChannel: When They Collide and Who Wins
How EtherChannel hides bundled links from STP, the bundling protocols (LACP, PAgP, on), the dangerous failure modes, and why LACP active on both sides is the only safe configuration.
Inter-VLAN Routing: SVI vs Router-on-a-Stick (with Real IOS XE Config)
The two ways to route between VLANs on Cisco: SVIs on an L3 switch and router-on-a-stick. Real IOS XE config for both, the performance gap, and the gotchas.
VLAN, Subnet, and Broadcast Domain: What's the Difference?
VLAN, subnet, and broadcast domain are not the same thing. The layer each lives at, the relationships between them, and the misalignment that breaks hosts silently.
Tagged vs Untagged VLANs: How Trunks and Access Ports Really Work
Tagged and untagged frames are the half of every VLAN problem nobody explains clearly. The mental model, when each is correct, the native VLAN, and the cross-vendor (Cisco / Aruba / Juniper) cheat sheet.
VLAN Hopping Attacks Explained: Switch Spoofing and Double Tagging
VLAN hopping bypasses Layer 2 isolation. The two attacks (switch spoofing via DTP, double tagging via the native VLAN) and the four-line Cisco configuration that defeats both.
802.1Q VLAN Tag Explained: The 4 Bytes That Make Trunking Work
The 802.1Q VLAN tag is 4 bytes inserted into Ethernet frames to carry VLAN identity across trunks. TPID, TCI, PCP, DEI, VID, and the native VLAN explained byte by byte.
VLAN Design for Campus Networks: From Access to Core
A good VLAN design scales cleanly, keeps STP domains small, and makes troubleshooting obvious. Here is how to plan VLANs for a multi-building campus network.
VLAN Security Hardening: Protecting Your Layer 2 Network
VLANs provide segmentation, not security. Without explicit hardening — disabling DTP, fixing the native VLAN, enabling DHCP snooping and DAI — your Layer 2 network is wide open to attack.
Troubleshooting Inter-VLAN Routing: SVIs, Router-on-a-Stick, and ARP Issues
Inter-VLAN routing failures are usually caused by SVIs in down state, missing routes, DHCP misconfiguration, or ARP timeouts. Learn to diagnose and fix them systematically.