Examkin

Question

Difficulty: MediumVLAN Configuration and Access Port Setup

During a switch security audit on switch SW-1, a network engineer notices that interface FastEthernet0/10 is operating with default settings: its administrative mode is dynamic auto and it is assigned to default VLAN 1. The engineer needs to configure FastEthernet0/10 to statically connect an end-user workstation in VLAN 25 while explicitly disabling Dynamic Trunking Protocol (DTP) trunk negotiation on the interface.

Which combination of interface configuration commands correctly accomplishes this configuration?

  1. switchport mode access
    switchport access vlan 25    Answer
  2. B
    switchport access vlan 25
    switchport nonegotiate
  3. C
    switchport mode trunk
    switchport trunk native vlan 25
  4. D
    encapsulation dot1q 25
    switchport access vlan 25

Answer

The command sequence consisting of 'switchport mode access' followed by 'switchport access vlan 25' correctly provisions the interface as a static access port in VLAN 25.
Executing 'switchport mode access' explicitly defines the interface as a Layer 2 access port, which automatically disables DTP trunk negotiation. Following this with 'switchport access vlan 25' places the interface into VLAN 25.

Step-by-Step Solution

1
Enforce static access mode
Configuring 'switchport mode access' under interface configuration mode turns off dynamic trunking (DTP) negotiations toward becoming a trunk line and locks the port in access mode.
By default, Cisco switch ports run in dynamic auto mode, which allows them to negotiate trunking if the remote end initiates it.
2
Assign the access VLAN membership
Configuring 'switchport access vlan 25' assigns all untagged ingress traffic on this port to VLAN 25.
Access ports belong to exactly one data VLAN to isolate broadcast domains.

Key Concept

Configuring Layer 2 switch access ports and disabling DTP negotiation in Cisco IOS
Rate this question

Topics

VLAN Configuration and Access Port Setup

More questions from this topic