A network administrator needs to manually configure an 802.1Q trunk link on a switch port supporting multi-encapsulation according to security best practices. Place the Cisco IOS configuration commands in the correct execution sequence from initial interface selection to traffic pruning.
- 1Enter interface configuration mode (e.g., interface GigabitEthernet0/1)
- 2Set trunk encapsulation to 802.1Q (switchport trunk encapsulation dot1q)
- 3Configure the interface mode to trunk (switchport mode trunk)
- 4Reassign the native VLAN away from default VLAN 1 (switchport trunk native vlan 99)
- 5Specify the list of permitted VLANs (switchport trunk allowed vlan 10,20,99)
Answer
The correct configuration sequence is: 1) Enter interface context, 2) Define 802.1Q encapsulation, 3) Set switchport mode to trunk, 4) Reassign the native VLAN ID, and 5) Define allowed VLANs for traffic pruning.
The correct operational sequence begins with entering the interface configuration context. Next, on switches supporting multiple encapsulation protocols, 802.1Q encapsulation must be explicitly configured prior to setting the interface mode to trunk. Once the trunk state is active, security hardening steps follow: reassigning the untagged native VLAN away from VLAN 1, and finally filtering trunk traffic by restricting allowed VLANs.
Step-by-Step Solution
Key Concept
Manual 802.1Q Trunk CLI Configuration Order