spanning-tree root bridge, and the other core switch to be the secondary root bridge. See Chapter 8 for additional details. VTP. I'm not a big fan of VTP, especially for small networks, but even if you don't use it, you'll need to configure a VTP domain name. Trunk negotiation requires the VTP domain to be set properly. See the Chapter 5 for more details. VLANs. How many VLANs will you need? Make sure you plan them all out ahead of time. Here's a list I came up with just by looking at Figure 33-10: Internet Internet inside Server farm User VLANs Planning ahead of time will save you from having to make last-minute decisions and wasting time. E-Commerce Web Sites An e-commerce web site is one on which goods are sold and money is exchanged. E-commerce web sites involve some concerns that don't exist with simple web sites. The biggest challenge is security. If you throw together a Linux server, and host a simple web site on it, you only have to worry about security for the web server. With an e-commerce web site, you will probably have multiple web servers. Each of those web servers will probably need to access a database, which should not be accessible from the Internet. In fact, the database shouldn't even be directly accessible from the web servers! Instead, there should be a layer of servers that process requests to the database on the web servers' behalf. This layer of servers is called the application layer. Now, you have to worry about security for web servers, application servers, and database servers. Some or all of these servers may need to be load-balanced, and all of them will need to be managed. Management can be an interesting challenge because as I've said, database servers should not be accessible from the Internet. Network Designs The database servers will contain customer information, and possibly, credit card data. This information must be protected. Keeping the servers away from the Internet is one of the best ways to accomplish the required protection. The standard design for an e-commerce web si