What is VTP Server?

Understanding VTP Server

A VTP server is a switch operating in the server mode of Cisco's VLAN Trunking Protocol (VTP), the default mode on most Cisco switches. It can create, modify, and delete VLANs for the entire VTP domain and propagates those VLAN configuration changes to other switches over trunk links, keeping VLAN databases consistent across the network.

The mechanism relies on a configuration revision number. Each time a VTP server changes the VLAN database, it increments the revision number and advertises the update across trunks. Switches receiving an advertisement with a higher revision number and a matching domain name overwrite their own VLAN database with the newer configuration. Servers store the VLAN database in NVRAM, in contrast to client mode, which does not retain VLANs after reboot, and transparent mode, which forwards advertisements but ignores them.

The VTP server role matters because it centralizes VLAN management, but that convenience carries a notorious risk. If a switch with a higher configuration revision number, even an old one removed and re-added to the network, is connected as a server or client, it can propagate its database and wipe out the production VLAN configuration domain-wide, causing a major outage. This makes VTP a real availability and operational-security concern.

For example, an administrator returns a previously used switch to the network without resetting its VTP configuration revision. Because its revision number is higher than the current domain's, the other switches accept its outdated VLAN database, deleting dozens of production VLANs and disconnecting users instantly. Best practice is to reset the revision (by toggling VTP mode to transparent and back, or changing the domain name) before attaching any switch.