Examkin

Question

Difficulty: MediumVLAN Configuration and Access Port Setup

A network administrator is inspecting a Cisco Catalyst switch interface that connects to a user PC. Running the command `show interfaces FastEthernet 0/4 switchport` displays the following output:

text
Name: Fa0/4
Administrative Mode: dynamic auto
Operational Mode: static access
Administrative Trunking Encapsulation: dot1q
Operational Trunking Encapsulation: native
Negotiation of Trunking: On
Access Mode VLAN: 1 (default)

The administrator needs to permanently configure this interface as a static access port assigned to VLAN 30 and disable DTP negotiation. Which set of commands must be executed under interface configuration mode to achieve this objective?

  1. switchport mode access
    switchport access vlan 30
    switchport nonegotiate    Answer
  2. B
    switchport trunk native vlan 30
    switchport mode trunk
  3. C
    vlan 30
    switchport mode dynamic desirable
  4. D
    ip address 192.168.30.1 255.255.255.0
    no shutdown

Answer

The command sequence consisting of `switchport mode access`, `switchport access vlan 30`, and `switchport nonegotiate` correctly assigns the port statically to VLAN 30 and disables DTP negotiation.
The correct command sequence explicitly configures the interface as a static access port (`switchport mode access`), assigns it to the designated access VLAN (`switchport access vlan 30`), and prevents the port from sending Dynamic Trunking Protocol frames (`switchport nonegotiate`).

Step-by-Step Solution

1
Analyze current interface state
The administrative mode is `dynamic auto`, meaning it will dynamically negotiate a trunk if the opposing side initiates negotiation.
To secure and statically assign an access port, dynamic trunking must be overridden.
2
Statically set access mode and assign target VLAN
`switchport mode access` forces static access behavior, and `switchport access vlan 30` binds untagged traffic to VLAN 30.
Access ports belong to a single broadcast domain (VLAN) for end-host traffic.
3
Disable DTP frame generation
`switchport nonegotiate` stops DTP frames from being sent out the port.
Disabling DTP prevents unauthorized trunk establishment attempts on access ports.

Key Concept

Configuring Layer 2 Static Access Ports and Disabling DTP Negotiation
Estimated Time:1m 30s
Rate this question

Topics

VLAN Configuration and Access Port Setup

More questions from this topic