Question

Difficulty: MediumVLAN Configuration and Access Port Setup

An IT technician is preparing a newly racked Cisco Catalyst switch to connect corporate workstations. The technician needs to create VLAN 15 named FIN_DEPT and assign interface GigabitEthernet0/5 to this VLAN as a static access port while explicitly disabling Dynamic Trunking Protocol (DTP) frame negotiation. Which sequence of Cisco IOS commands correctly accomplishes this configuration?

  1. vlan 15
    name FIN_DEPT
    exit
    interface GigabitEthernet0/5
    switchport mode access
    switchport access vlan 15
    switchport nonegotiate
    Answer
  2. B
    vlan 15
    name FIN_DEPT
    exit
    interface GigabitEthernet0/5
    switchport mode dynamic desirable
    switchport access vlan 15
  3. C
    vlan 15
    name FIN_DEPT
    exit
    interface GigabitEthernet0/5
    switchport trunk native vlan 15
  4. D
    vlan 15
    name FIN_DEPT
    exit
    interface GigabitEthernet0/5
    switchport access vlan 15
    switchport mode trunk

Answer

The correct command sequence creates VLAN 15 named FIN_DEPT, configures the interface with 'switchport mode access' to force static access mode, assigns it to VLAN 15 with 'switchport access vlan 15', and disables DTP frame negotiation using 'switchport nonegotiate'.
The correct command sequence creates VLAN 15 named FIN_DEPT in global configuration mode, enters interface mode for GigabitEthernet0/5, sets the operational mode to static access using 'switchport mode access', assigns it to VLAN 15 using 'switchport access vlan 15', and turns off Dynamic Trunking Protocol frame generation with 'switchport nonegotiate'.

Step-by-Step Solution

1
Create and name the VLAN in global configuration mode
VLAN 15 is created and assigned the name FIN_DEPT.
VLANs must exist in the switch VLAN database to forward traffic properly for assigned access interfaces.
2
Enter interface configuration mode and set the switchport mode
Interface GigabitEthernet0/5 is statically set to access mode via 'switchport mode access'.
Static access mode prevents the port from dynamically negotiating trunking.
3
Assign the interface to VLAN 15 and disable DTP negotiation
The port is assigned to VLAN 15 with 'switchport access vlan 15' and DTP negotiation is disabled with 'switchport nonegotiate'.
This completes static access port setup and hardens the port against unauthorized trunk negotiation.

Key Concept

VLAN Creation, Access Port Assignment, and DTP Hardening
Rate this question