Cisco VLAN Troubleshooting

Virtual LANs (VLANs) are fundamental to network segmentation in enterprise environments. When VLANs malfunction, it can lead to widespread connectivity issues affecting entire departments or services.

Typical VLAN issues include:

• Devices unable to reach other devices in the same VLAN
• Inter-VLAN routing failures
• Incorrect trunk configuration
• VLANs missing from trunk links

This guide walks through a practical troubleshooting workflow using common Cisco IOS commands.

Step 1: Verify VLAN Exists on the Switch

The first step is confirming that the VLAN is actually defined in the switch VLAN database.

show vlan brief

Example output:

Switch# show vlan brief

VLAN Name                             Status    Ports
---- -------------------------------- --------- -------------------------------
1    default                          active    Fa0/1, Fa0/2
10   Engineering                      active    Fa0/10
20   Sales                            active    Fa0/11

If the VLAN does not appear here, it must be created:

configure terminal
vlan 10
name Engineering
exit

Step 2: Verify Access Port VLAN Assignment

If a device cannot communicate with others in the same VLAN, confirm the access port configuration.

show running-config interface fastEthernet0/10

Correct access port configuration should resemble:

interface FastEthernet0/10
 switchport mode access
 switchport access vlan 10
 spanning-tree portfast

If the port is assigned to the wrong VLAN, fix it with:

configure terminal
interface fastEthernet0/10
switchport access vlan 10

Step 3: Check Trunk Links Between Switches

When devices across multiple switches cannot communicate, trunk links are often the issue.

Check trunk status:

show interfaces trunk

Example output:

Port        Mode         Encapsulation  Status        Native vlan
Gi0/1       on           802.1q         trunking      1

Verify the VLAN is allowed on the trunk:

show interfaces trunk

If the VLAN is missing, add it:

configure terminal
interface gigabitEthernet0/1
switchport trunk allowed vlan add 10

Step 4: Verify Inter-VLAN Routing

If devices in different VLANs cannot communicate, verify routing is configured correctly.

On a Layer 3 switch:

show ip interface brief

Example VLAN interface configuration:

interface vlan 10
ip address 192.168.10.1 255.255.255.0
no shutdown

Ensure routing is enabled:

ip routing

Step 5: Verify MAC Address Learning

If traffic is not reaching the correct port, confirm the switch is learning MAC addresses in the VLAN.

show mac address-table vlan 10

Example output:

Vlan    Mac Address       Type        Ports
----    -----------       --------    -----
10      001a.2b3c.4d5e    dynamic     Fa0/10

If no entries appear, the device may be disconnected, misconfigured, or on the wrong VLAN.

Step 6: Verify Spanning Tree Status

Spanning Tree Protocol (STP) may block ports to prevent loops, which can appear as connectivity failures.

show spanning-tree vlan 10

If the port is in a blocking state, investigate the STP topology or adjust port roles.

Quick VLAN Troubleshooting Checklist

• Confirm VLAN exists (show vlan brief)
• Verify access port VLAN assignment
• Check trunk configuration
• Ensure VLAN allowed on trunk
• Confirm inter-VLAN routing
• Verify MAC address learning
• Check STP blocking states

Final Thoughts

VLAN issues are usually caused by small configuration mistakes: missing VLANs, incorrect trunk settings, or ports assigned to the wrong VLAN.

By following a structured troubleshooting workflow using IOS verification commands, network administrators can quickly identify the source of the problem and restore connectivity.