# VTP Version 3

**URL:** <https://forum.networklessons.com/t/vtp-version-3/1225>\
**Category:** Lessons Discussion\
**Created:** [December 29, 2016, 5:23pm UTC](https://forum.networklessons.com/t/vtp-version-3/1225 "2016-12-29T17:23:05Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)\
**Post date:** [December 29, 2016, 5:23pm UTC](https://forum.networklessons.com/t/vtp-version-3/1225/1 "2016-12-29T17:23:05Z")

</div>

This topic is to discuss the following lesson:

> **[VTP Version 3](https://networklessons.com/switching/vtp-version-3)**
>
> VTP version 3 is similar to VTPv2 but it has some extras like syncing private VLANs, MST, RSPAN VLANs and more. This lesson explains how to confiure it.

---

<div class="post-metadata">

**Author:** ![mdbetar](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/m/e9bcb4/32.png) [@mdbetar](https://forum.networklessons.com/u/mdbetar)\
**Post date:** [May 16, 2015, 8:41pm UTC](https://forum.networklessons.com/t/vtp-version-3/1225/2 "2015-05-16T20:41:43Z")

</div>

Thanks For VTPv3  
…Nice Explanation …

---

<div class="post-metadata">

**Author:** ![atif03](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/a/e68b1a/32.png) [@atif03](https://forum.networklessons.com/u/atif03)\
**Post date:** [July 2, 2015, 11:45am UTC](https://forum.networklessons.com/t/vtp-version-3/1225/3 "2015-07-02T11:45:45Z")

</div>

Great explanation.  
thanks

---

<div class="post-metadata">

**Author:** ![oigeboy](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/o/cc9497/32.png) [@oigeboy](https://forum.networklessons.com/u/oigeboy)\
**Post date:** [September 3, 2015, 5:13pm UTC](https://forum.networklessons.com/t/vtp-version-3/1225/4 "2015-09-03T17:13:56Z")

</div>

Great explanation Rene. Simple, clear & to the point. Excellent.  
thank you.

---

<div class="post-metadata">

**Author:** ![am.sepide](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/a/49beb7/32.png) [@am.sepide](https://forum.networklessons.com/u/am.sepide)\
**Post date:** [September 12, 2015, 7:59am UTC](https://forum.networklessons.com/t/vtp-version-3/1225/5 "2015-09-12T07:59:27Z")

</div>

Danke Rene.It is really good 🙂

---

<div class="post-metadata">

**Author:** ![am.sepide](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/a/49beb7/32.png) [@am.sepide](https://forum.networklessons.com/u/am.sepide)\
**Post date:** [September 12, 2015, 9:17am UTC](https://forum.networklessons.com/t/vtp-version-3/1225/6 "2015-09-12T09:17:43Z")

</div>

Is there no force to change VTP mode to transparent in switch for private VLAN?

---

<div class="post-metadata">

**Author:** ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)\
**Post date:** [September 12, 2015, 10:40am UTC](https://forum.networklessons.com/t/vtp-version-3/1225/7 "2015-09-12T10:40:48Z")

</div>

For VTP version 1 or 2 you should VTP transparent mode. For VTP version 3, server and client mode also support private VLANs.

---

<div class="post-metadata">

**Author:** ![adel\_khalil8](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/a/e495f1/32.png) [@adel\_khalil8](https://forum.networklessons.com/u/adel_khalil8)\
**Post date:** [September 18, 2015, 12:09pm UTC](https://forum.networklessons.com/t/vtp-version-3/1225/8 "2015-09-18T12:09:41Z")

</div>

which IOS Version Can run VTP V3 ?

---

<div class="post-metadata">

**Author:** ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)\
**Post date:** [September 24, 2015, 9:55pm UTC](https://forum.networklessons.com/t/vtp-version-3/1225/9 "2015-09-24T21:55:38Z")

</div>

Hi Adel,

It’s best to use the Cisco Feature Navigator for this:

[http://tools.cisco.com/ITDIT/CFN/jsp/index.jsp](http://tools.cisco.com/ITDIT/CFN/jsp/index.jsp)

Search by feature and look for “VTP version 3”. There’s quite a list with IOS images that support it.

Rene

---

<div class="post-metadata">

**Author:** ![singhronie](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/s/7c8e57/32.png) [@singhronie](https://forum.networklessons.com/u/singhronie)\
**Post date:** [October 5, 2015, 9:17am UTC](https://forum.networklessons.com/t/vtp-version-3/1225/10 "2015-10-05T09:17:08Z")

</div>

Hi Rene,

Great topic. I have one clarification with you. I am aware of that extended vlans (1006-4095) are only configurable on the switch with VTP mode set to transparent. VTP version 3 is supporting extended vlans where version 1 and 2 aren’t.

My clarification is that since a switch in VTP transparent is not synchronizing(updating) its vlans to others switches, how VTP version 3 can propagate those extended vlans to other switches ? It doesn’t make sense to me. I do hope you are the one who can make me understand. 🙂

Thank you in advance.

Best Regards,

Ronie

&nbsp;

---

<div class="post-metadata">

**Author:** ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)\
**Post date:** [October 5, 2015, 12:36pm UTC](https://forum.networklessons.com/t/vtp-version-3/1225/11 "2015-10-05T12:36:56Z")

</div>

Hi Ronie,

Switches in VTP transparent mode don’t synchronizes themselves but they **do** forward VTP advertisements. This allows other switches to learn VLAN information.

Rene

---

<div class="post-metadata">

**Author:** ![singhronie](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/s/7c8e57/32.png) [@singhronie](https://forum.networklessons.com/u/singhronie)\
**Post date:** [October 8, 2015, 7:23am UTC](https://forum.networklessons.com/t/vtp-version-3/1225/12 "2015-10-08T07:23:56Z")

</div>

Hi Rene,

Thank you for your response.I got the answer from Mr.Google. In VTP ver 1 and 2, we need to set the VTP mode to transparent before creating extended vlans. In VTP ver 3, we can create extended vlans with VTP server mode itself.

I am cleared now 🙂

&nbsp;

Best Regards,

Ronie

---

<div class="post-metadata">

**Author:** ![ikhambay](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/i/a88e4f/32.png) [@ikhambay](https://forum.networklessons.com/u/ikhambay)\
**Post date:** [January 4, 2016, 6:45pm UTC](https://forum.networklessons.com/t/vtp-version-3/1225/13 "2016-01-04T18:45:20Z")

</div>

Hi Rene

Quick question , in a switch network running VTP VER 3, a primary server has revision number 201, if a new switch running vtp3 server mode reversion umber 301 is connected with same domain name, will the other switches (client) update their database learned from switch with reversion number 301, or they will only take their update from primary server.

&nbsp;

Thanks

&nbsp;

&nbsp;

---

<div class="post-metadata">

**Author:** ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)\
**Post date:** [January 5, 2016, 11:57am UTC](https://forum.networklessons.com/t/vtp-version-3/1225/14 "2016-01-05T11:57:20Z")

</div>

With VTP v3 switches will only synchronize with the primary server.

---

<div class="post-metadata">

**Author:** ![michmoor](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/michmoor/32/3557_2.png) [@michmoor](https://forum.networklessons.com/u/michmoor)\
**Post date:** [April 25, 2016, 4:55am UTC](https://forum.networklessons.com/t/vtp-version-3/1225/15 "2016-04-25T04:55:38Z")

</div>

So with VTP v3 revision numbers no longer have any place which is great but am I correct in understanding that any switch in the VTP domain can become a primary server? What if i have 2 distro switches and X amount of access switches. Realistically I would want my vlan creations and my primary server on the DISTRO but what stops another administrator from promoting an access layer switch to primary?

---

<div class="post-metadata">

**Author:** ![andrew](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/andrew/32/645_2.png) [@andrew](https://forum.networklessons.com/u/andrew)\
**Post date:** [April 25, 2016, 5:04pm UTC](https://forum.networklessons.com/t/vtp-version-3/1225/16 "2016-04-25T17:04:30Z")

</div>

Michael,  
You can set a VTP v3 password that prevents a device from becoming primary without it. This is done via  
`(config)#vtp password <PASSWORD> hidden`  
Where the “hidden” keyword will obfuscate the password in the config.

---

<div class="post-metadata">

**Author:** ![michmoor](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/michmoor/32/3557_2.png) [@michmoor](https://forum.networklessons.com/u/michmoor)\
**Post date:** [April 26, 2016, 3:08am UTC](https://forum.networklessons.com/t/vtp-version-3/1225/17 "2016-04-26T03:08:23Z")

</div>

Well that prevents any unauthorized switches from joining the VTP domain but once those switches agree on domain name and password what is to stop an administrator from choosing another switch other than the VTP primary and choosing that other switch as the VTP primary?

---

<div class="post-metadata">

**Author:** ![michmoor](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/michmoor/32/3557_2.png) [@michmoor](https://forum.networklessons.com/u/michmoor)\
**Post date:** [April 26, 2016, 3:13am UTC](https://forum.networklessons.com/t/vtp-version-3/1225/18 "2016-04-26T03:13:09Z")

</div>

Actually,you helped me figure out thank you. You are correct in your reply I guess I just had a brain fart 🙂

From the CISCO documentation - Thanks Andrew !!

> **[Catalyst 3560 Software Configuration Guide, Release 12.2(52)SE - Configuring...](https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3560/software/release/12-2_52_se/configuration/guide/3560scg/swvtp.html)**

```auto
Switch(config)# vtp password mypassword hidden
 Generating the secret associated to the password.
 Switch(config)# end

```

```auto
 Switch# show vtp password
 VTP password: 89914640C8D90868B6A0D8103847A733

Switch# vtp primary vlan
 Enter VTP password: mypassword
 This switch is becoming Primary server for vlan feature in the VTP domain

 VTP Database Conf Switch ID Primary Server Revision System Name           
 ------------ ---- -------------- -------------- -------- --------------------
 VLANDB Yes 00d0.00b8.1400=00d0.00b8.1400 1 stp7                  

 Do you want to continue (y/n) [n]? y
Enabling the VTP Version

```

---

<div class="post-metadata">

**Author:** ![luis1](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/l/91b2a8/32.png) [@luis1](https://forum.networklessons.com/u/luis1)\
**Post date:** [October 4, 2016, 10:54pm UTC](https://forum.networklessons.com/t/vtp-version-3/1225/19 "2016-10-04T22:54:44Z")

</div>

HI Rene,

There are an little error in this sentence:

**Let’s see if we are able to synchronize some VLANs. We’ll start with something simple:**

 

**```auto
SW1(config)#vlan 100
SW2(config-vlan)#exit**

**```**

 

I think its SW1 instead of `SW2(config-vlan)#exit`

Thanks for all! very easy to study with your explanations.

---

<div class="post-metadata">

**Author:** ![maher1](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/m/9dc877/32.png) [@maher1](https://forum.networklessons.com/u/maher1)\
**Post date:** [October 7, 2016, 9:02am UTC](https://forum.networklessons.com/t/vtp-version-3/1225/20 "2016-10-07T09:02:35Z")

</div>

Thanks Luis, we will correct it.

[Next page](https://forum.networklessons.com/t/vtp-version-3/1225.md?page=2)
