Question

Difficulty: MediumVLAN Configuration and 802.1Q Trunking

A network technician provisions an IEEE 802.1Q trunk link on switch `SW-Floor2` interface `GigabitEthernet0/48` to connect to `SW-Core1`. Workstations on VLAN 10 (Finance) immediately lose connectivity to remote resources on the same VLAN, while devices on VLAN 20 (IT) continue communicating normally. The running configuration for interface `GigabitEthernet0/48` displays the following output:

text
interface GigabitEthernet0/48
switchport mode trunk
switchport trunk native vlan 1
switchport trunk allowed vlan 20,30

Which of the following statements accurately identify the cause of the connectivity loss and specify the correct corrective action? (Select TWO.)

  1. VLAN 10 frames are dropped at the trunk port because VLAN 10 is omitted from the allowed VLAN pruning list on interface GigabitEthernet0/48.Answer
  2. B
    VLAN 10 traffic is automatically forwarded untagged over the trunk link because unlisted VLANs default to native VLAN handling.
  3. The administrator must execute `switchport trunk allowed vlan add 10` on interface GigabitEthernet0/48 to permit VLAN 10 traffic across the link.Answer
  4. D
    A Layer 3 router must be installed between SW-Floor2 and SW-Core1 to route VLAN 10 frames across the switchport trunk interface.

Answer

The outage is caused by VLAN 10 being excluded from the trunk port's explicit allowed list. The issue is resolved by running `switchport trunk allowed vlan add 10` on the trunk interface.
On an 802.1Q trunk, configuring `switchport trunk allowed vlan` creates an explicit permit list. Because VLAN 10 was not listed, its frames were filtered at the trunk boundary. Executing `switchport trunk allowed vlan add 10` appends VLAN 10 to the allowed list, enabling frame transmission across switches for that broadcast domain.

Step-by-Step Solution

1
Analyze the trunk configuration snippet on interface GigabitEthernet0/48.
The line `switchport trunk allowed vlan 20,30` limits trunking strictly to VLANs 20 and 30.
VLAN 10 is omitted from the allowed list, which causes the switch port to prune and drop all ingress and egress 802.1Q frames belonging to VLAN 10.
2
Determine the CLI command required to modify the allowed list safely.
Applying `switchport trunk allowed vlan add 10` updates the allowed list to 10,20,30.
Using the `add` parameter prevents overwriting existing allowed VLANs, ensuring VLAN 20 and VLAN 30 remain operational while restoring VLAN 10.

Key Concept

802.1Q Trunk Allowed VLAN Filtering
Rate this question