A network administrator is analyzing console log messages and packet captures between two Layer 2 switches, Switch-A and Switch-B, connected via an 802.1Q trunk on port GigabitEthernet0/1. Switch-A has GigabitEthernet0/1 configured with 'switchport trunk native vlan 10', whereas Switch-B has GigabitEthernet0/1 configured with 'switchport trunk native vlan 20'. Cisco Discovery Protocol (CDP) alerts report a %CDP-4-NATIVE_VLAN_MISMATCH error. Hosts on Switch-A in VLAN 10 report unexpected cross-talk and data leaks to hosts on Switch-B in VLAN 20, while tagged VLAN 30 traffic functions normally. Which of the following correctly explains the underlying root cause of this behavior and the required resolution?
- The native VLAN mismatch causes untagged frames sent from Switch-A (VLAN 10) to be received and ingested as untagged frames on Switch-B and assigned to its local native VLAN (VLAN 20); configuring matching native VLAN numbers on both trunk endpoints resolves the cross-VLAN leakage.Cevap
- BLate collisions caused by a duplex mismatch on GigabitEthernet0/1 are stripping the 802.1Q header tags from VLAN 10 frames prior to arrival at Switch-B; manually setting both trunk ports to full-duplex speed and mode will restore proper tagging.
- CLayer 2 switches cannot pass traffic between identical VLANs across physical switch boundaries without a Layer 3 inter-VLAN router; installing an external router to perform subinterface routing will resolve the communication issue.
- DSpanning Tree Protocol (STP) has placed GigabitEthernet0/1 on Switch-A into a blocking state because Switch-A has an STP bridge priority of 61440; decreasing Switch-A's STP priority to 65535 will elect Switch-A as the root bridge and unblock the port.
Cevap
The native VLAN mismatch causes untagged frames sent from Switch-A (VLAN 10) to be received and ingested as untagged frames on Switch-B and assigned to its local native VLAN (VLAN 20); configuring matching native VLAN numbers on both trunk endpoints resolves the cross-VLAN leakage.
In 802.1Q trunking, traffic belonging to the native VLAN is sent untagged across the link. When Switch-A sends VLAN 10 traffic untagged (due to native VLAN 10 configuration), Switch-B receives those untagged frames and implicitly assigns them to its own native VLAN (VLAN 20). This results in untagged broadcast domain leakage across VLAN boundaries. Matching the native VLAN settings across both switches resolves the issue.
Adım Adım Çözüm
Anahtar Kavram
Native VLAN Mismatch Behavior on IEEE 802.1Q Trunk Links