2013-02-12

Cisco VTP: MD5 digest error - please check the password of the VTP mode Server switches

Lost some time yesterday connecting some 5 year uptime switches to some new C3560X and wondered how come that I'm not able to make VTP work on them.

As soon as I saw and kind of MD5 digest error or warning, I should've just issued a

show vtp password

and it would have shown me that we had some password set that I would have needed on the new. But I did not and I ended up with

conf t
no vtp password

and later, when I saw things working added a vtp password again to it.

To debug VTP

debug sw-vlan vtp

On the web there was someone saying that it could be a bug, but for me this was not the cause and VTP is working nicely.

Strange thing: The new C3560X show VTP version running 1, even though the old ones are running VTP version 2. It looks like the mode client and a successfull communication to a server somehow sets this back? Not sure as I had one of the new switches that was perfectly fine, vtp domain, vtp version 2, vtp mode client, vtp password and vtp revision number was smaller than the server, all was fine but it did not process the VTP messages. So I went in and did a vtp mode transparent, vtp version 1, vtp mode client and it worked. That was only 1 of 4 all others worked but it might have been my playing around with vtp domain x to y to z and mode server, transparent and client ... that they fell back to vtp version 1 per se. The C3560X say they can run VTP 1 to 3 and the IOS Guide says the default to 1.

Most probably I should start reading the Cisco IOS configuration guide ;)

No comments: