Question

Difficulty: MediumVLAN Configuration and 802.1Q Trunking

A network engineer is configuring a switch port connected to an enterprise wireless access point (AP). The AP requires untagged management traffic to be placed onto VLAN 10, while user Wi-Fi traffic must be carried across the link as 802.1Q tagged frames for VLAN 30. Which of the following interface configuration approaches correctly fulfills this requirement?

  1. Configure the interface in 802.1Q trunking mode, designate VLAN 10 as the native VLAN, and allow VLANs 10 and 30 on the trunk.Answer
  2. B
    Configure the interface as an access port assigned to VLAN 10, allowing the switch to forward VLAN 30 tagged frames across the single access broadcast domain without trunking.
  3. C
    Configure the interface in 802.1Q trunking mode, set VLAN 30 as the native VLAN, and strip tags from VLAN 10 traffic upon ingress.
  4. D
    Configure the interface as an access port on VLAN 30 and specify VLAN 10 as a secondary access subnet on the same physical switch port.

Answer

Configure the interface in 802.1Q trunking mode, designate VLAN 10 as the native VLAN, and allow VLANs 10 and 30 on the trunk.
Configuring the switch port as an 802.1Q trunk with VLAN 10 designated as the native VLAN allows untagged management frames from the wireless access point to be placed into VLAN 10. Simultaneously, tagged frames for VLAN 30 are correctly identified and forwarded across the trunk link using 802.1Q encapsulation headers.

Step-by-Step Solution

1
Identify traffic requirements for the access point connection
Untagged traffic belongs to management (VLAN 10), and tagged traffic belongs to user Wi-Fi (VLAN 30).
An 802.1Q trunk link is required to carry traffic for multiple VLANs over a single physical interface.
2
Determine native VLAN configuration
VLAN 10 must be assigned as the native VLAN on the switch trunk port.
IEEE 802.1Q trunks transmit frames for the native VLAN without an 802.1Q header tag. Assigning VLAN 10 as native matches the AP's untagged management traffic.
3
Verify allowed VLAN list on the trunk
Both VLAN 10 and VLAN 30 must be permitted on the trunk interface.
Permitting both VLANs ensures tagged frames for VLAN 30 and untagged native frames for VLAN 10 are forwarded successfully.

Key Concept

802.1Q Native VLAN & Trunking Configuration
Estimated Time:1m 30s
Rate this question