A network technician configures an 802.1Q trunk link between Switch-1 and Switch-2. Switch-1 is configured with native VLAN 10, whereas Switch-2 is configured with native VLAN 20. Users connected to VLAN 10 on Switch-1 report that they can unexpectedly reach servers on VLAN 20 attached to Switch-2 without going through a router, while console logs generate periodic CDP error messages. Which of the following best explains the root cause of this cross-VLAN communication?
- Untagged frames sent from VLAN 10 on Switch-1 travel across the trunk link and are automatically placed into native VLAN 20 upon arrival at Switch-2.Cevap
- BA duplex mismatch on the trunk port is corrupting frame headers and causing the switches to route traffic between distinct VLAN broadcast domains.
- CThe switches lack a Layer 3 routing engine, which forces all connected switch ports to bridge broadcast domains together by default.
- DSpanning Tree Protocol (STP) has selected Switch-2 as the root bridge, automatically merging VLAN 10 and VLAN 20 into a single spanning tree instance.
Cevap
Untagged frames sent from VLAN 10 on Switch-1 travel across the trunk link and are automatically placed into native VLAN 20 upon arrival at Switch-2.
Under 802.1Q encapsulation, frames originating from the native VLAN are sent across a trunk link untagged. When neighboring switches have mismatched native VLAN settings (VLAN 10 on one end and VLAN 20 on the other), untagged frames originating on VLAN 10 are ingested by the receiving switch and mapped directly into VLAN 20. This creates a security leak and unexpected Layer 2 connectivity between two distinct VLANs.
Adım Adım Çözüm
Anahtar Kavram
802.1Q Native VLAN Mismatch Dynamics