Question

Difficulty: MediumVLAN Configuration and Access Port Setup

A network administrator is hardening switch port security on a Cisco Catalyst switch. Interface GigabitEthernet0/1 currently has default settings and is connected to a host workstation in the Accounting department. The administrator must explicitly configure the port to operate statically as an access interface in VLAN 30 (named ACCOUNTING) and ensure Dynamic Trunking Protocol (DTP) frames are no longer sent on this link. Which set of commands must be executed in interface configuration mode to fulfill these requirements?

  1. switchport mode access
    switchport access vlan 30
    Answer
  2. B
    switchport access vlan 30
    switchport trunk native vlan 30
  3. C
    switchport mode trunk
    switchport access vlan 30
  4. D
    vlan 30
    switchport access vlan 30

Answer

Configuring 'switchport mode access' statically defines the interface as an access port and disables DTP negotiation, while 'switchport access vlan 30' assigns the port to VLAN 30.
The command 'switchport mode access' statically disables trunking negotiation (DTP) and forces the port into operational access mode. Combined with 'switchport access vlan 30', it correctly places untagged traffic from the workstation into VLAN 30.

Step-by-Step Solution

1
Set the administrative operational mode of GigabitEthernet0/1 to static access.
The interface is forced into access mode, stopping DTP frame generation and preventing unwanted trunk negotiation.
By default, Cisco switch ports operate in dynamic auto mode, which actively responds to DTP negotiation.
2
Assign the interface to the target VLAN using 'switchport access vlan 30'.
Untagged frames entering GigabitEthernet0/1 are assigned to VLAN 30.
Access ports must be explicitly assigned to their designated VLAN broadcast domain.

Key Concept

Static Access Port Assignment and DTP Disabling
Estimated Time:1m 15s
Rate this question