Soru

Zorluk: Çok zorTroubleshooting VLAN, Trunking, and Switching Issues

A network engineer observes that hosts on VLAN 10 connected to Switch-Alpha are unexpectedly able to communicate with hosts on VLAN 20 connected to Switch-Beta across an 802.1Q trunk link without traversing a Layer 3 router. Console logs on Switch-Alpha report a CDP native VLAN mismatch warning indicating GigabitEthernet0/1 is in native VLAN 10, while Switch-Beta reports native VLAN 20 on its connecting port. Which of the following technical explanations accounts for this cross-VLAN communication behavior?

  1. Switch-Alpha transmits frames originating from VLAN 10 without an 802.1Q header across the trunk, and Switch-Beta accepts these untagged frames and assigns them directly to its local native VLAN 20.Cevap
  2. B
    Spanning Tree Protocol (STP) automatically bridges the broadcast domains of VLAN 10 and VLAN 20 to preserve network topology convergence upon detecting the mismatch.
  3. C
    The switchport speed/duplex mismatch on the link causes excessive late collisions, forcing untagged frames to flood across all broadcast domains on both switches.
  4. D
    The switches automatically establish an internal Layer 3 Switched Virtual Interface (SVI) proxy route to forward traffic between VLAN 10 and VLAN 20.

Cevap

Switch-Alpha transmits frames originating from VLAN 10 without an 802.1Q header across the trunk, and Switch-Beta accepts these untagged frames and assigns them directly to its local native VLAN 20.
Under the IEEE 802.1Q standard, traffic associated with a trunk port's native VLAN is sent across the link without an Ethernet VLAN tag. When Switch-Alpha (native VLAN 10) transmits untagged frames for VLAN 10, Switch-Beta (native VLAN 20) receives these untagged frames and assigns them to its own native VLAN 20. This causes Layer 2 traffic from VLAN 10 on Switch-Alpha to leak directly into VLAN 20 on Switch-Beta without passing through a Layer 3 device.

Adım Adım Çözüm

1
Analyze the trunk configuration and behavior for 802.1Q native VLANs.
802.1Q trunks transmit traffic belonging to the native VLAN untagged (without an 802.1Q VLAN header tag).
Understanding how native VLAN encapsulation works is key to tracing untagged frame delivery.
2
Trace frame egress from Switch-Alpha.
Frames from hosts on VLAN 10 leave Switch-Alpha over GigabitEthernet0/1 untagged because native VLAN on Switch-Alpha is VLAN 10.
Switch-Alpha strips VLAN 10 tags (or does not append them) prior to sending them on its native trunk port.
3
Trace frame ingress on Switch-Beta.
Switch-Beta receives untagged frames on GigabitEthernet0/1 and places them into its local native VLAN, which is configured as VLAN 20.
Ingress untagged frames are automatically assigned to the receiving switchport's configured native VLAN, leaking traffic between VLAN 10 and VLAN 20.

Anahtar Kavram

802.1Q Native VLAN Mismatch Traffic Leakage
Tahmini Süre:2m 0s
Bu soruyu puanla