Different Types of Switch Ports

■Mllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllll Cisco, com

•Access Ports: belong to and carry the traffic of only one VLAN

•Trunk Ports: carry the traffic of multiple VLANs and by default is a member of all VLANs in the VLAN database. Both ISL and 802.1Q trunk ports are supported

•Tunnel Ports: designed for service providers who carry traffic of multiple customers across their networks and are required to maintain the VLAN and Layer 2 protocol configurations of each customer without impacting the traffic of other customers. Both 802.1Q tunneling and Layer 2 protocol tunneling are supported

© 2002, Cisco Systems, Inc. All rights reserved. Cisco CCIE Prep v1.0—Module 5-23

Switch ports are Layer 2-only interfaces associated with a physical port. A switch port can be an access port, a trunk port, or a tunnel port. You can manually configure a port as an access port or trunk port or let the Dynamic Trunking Protocol (DTP) operate on a per-port basis to determine if a switch port should be an access port or a trunk port by negotiating with the port on the other end of the link. You must manually configure tunnel ports as part of an asymmetric link connected to an 802.1Q trunk port. Switch ports are used for managing the physical interface and associated Layer 2 protocols and do not handle routing or bridging.

Access Ports

An access port belongs to and carries the traffic of only one VLAN. Traffic is received and sent in native formats with no VLAN tagging. Traffic arriving on an access port is assumed to belong to the VLAN assigned to the port.

Trunk Ports

A trunk port carries the traffic of multiple VLANs and by default is a member of all VLANs in the VLAN database. Two types of trunk ports are supported:

ISL trunk port - All received packets are expected to be encapsulated with an ISL header, and all transmitted packets are sent with an ISL header. Native (non-tagged) frames received from an ISL trunk port are dropped.

■ IEEE 802.1Q trunk port - Supports simultaneous tagged and untagged traffic. An 802.1Q trunk port is assigned a default Port VLAN ID (PVID), and all untagged traffic travels on the port default PVID. All untagged traffic and tagged traffic with a NULL VLAN ID are assumed to belong to the port default PVID. A packet with a VLAN ID equal to the outgoing port default PVID is sent untagged. All other traffic is sent with a VLAN tag.

Tunnel Ports

Tunnel ports are used in 802.1Q tunneling to segregate the traffic of customers in a service provider network from other customers who appear to be on the same VLAN. You configure an asymmetric link from a tunnel port on a service provider edge switch to an 802.1Q trunk port on the customer switch. Packets entering the tunnel port on the edge switch, already 802.1Q-tagged with the customer VLANs, are encapsulated with another layer of 802.1Q tag (called the metro tag) containing a VLAN ID unique in the service provider network, for each customer. The double-tagged packets go through the service-provider network keeping the original customer VLANs separate from those of other customers. At the outbound interface, also a tunnel port, the metro tag is removed, and the original VLAN numbers from the customer network are retrieved.

Tunnel ports cannot be trunk ports or access ports and must belong to a VLAN unique for each customer.

Note Switch ports are configured using the switchport interface configuration command.

This section discusses the configuration of Access Ports on the Catalyst 3550.

This section discusses the configuration of Access Ports on the Catalyst 3550.

Different Types Intravenous Ports
You can manually assign access ports to a VLAN without having VTP globally propagate VLAN configuration information.

Note If you assign an interface to a VLAN that does not exist, a new VLAN is created.

Use the steps outlined in the following table to manually assign an access port to a VLAN.

Table 4-10: Assign Ports to a VLAN

Command

Purpose

3550(config)# interface interface-id

Enter the interface to be added to the VLAN.

3550(config-if)# switchport mode access

Define the VLAN membership mode for the port (Layer 2 access port).

3550(config-if)# switchport access vlan vlan-id

Assign the port to a VLAN. Valid VLAN IDs are 1 to 4094; do not enter leading zeros.

Note To return an interface to its default configuration, use the default interface interface-id interface configuration command.

This section discusses the configuration of Trunk Ports on the Catalyst 3550.

This section discusses the configuration of Trunk Ports on the Catalyst 3550.

3550(config) 3550(config-3550(config-3550(config-3550(config-3550ft

3550(config) 3550(config-3550(config-3550(config-3550(config-3550ft

# interface fastEthernet 0/11 if)# switchport trunk encapsulation isl if)# switchport mode trunk if)# switchport access vlan 1

# interface fastEthernet 0/11 if)# switchport trunk encapsulation isl if)# switchport mode trunk if)# switchport access vlan 1

3550(config) ft 3550(config-i 3550(config-i 3550(config-i 3550(config-i 3550(config-i 3550ft interface fastEthernet 0/12 r)ft switchport trunk encapsulation dotlq r)ft switchport mode trunk r)ft switchport access vlan 1 r)ft switchport trunk native vlan 1 ")# end

3550(config) ft 3550(config-i 3550(config-i 3550(config-i 3550(config-i 3550(config-i 3550ft interface fastEthernet 0/12 r)ft switchport trunk encapsulation dotlq r)ft switchport mode trunk r)ft switchport access vlan 1 r)ft switchport trunk native vlan 1 ")# end

ISL Trunk

802.1Q Trunk

• Make sure the native vlan is set on 802.1Q trunks and that it matches on both sides of the trunk link

© 2002, CiscoSystems, Inc. All rights reserved.

Cisco CCIE Prep v1.0—Mot

5-25

A trunk is a point-to-point link between one or more Ethernet switch interfaces and another networking device such as a router or a switch. Fast Ethernet and Gigabit Ethernet trunks carry the traffic of multiple VLANs over a single link, and you can extend the VLANs across an entire network.

Two trunking encapsulations are available on all Ethernet interfaces on the Catalyst 3550:

■ Inter-Switch Link (ISL)—ISL is Cisco-proprietary trunking encapsulation.

■ 802.1Q—802.1Q is industry-standard trunking encapsulation.

You can set an interface as trunking or nontrunking or to negotiate trunking with the neighboring interface. To autonegotiate trunking, the interfaces must be in the same VTP domain. Trunk negotiation is managed by the Dynamic Trunking Protocol (DTP), which is a Point-to-Point Protocol. DTP supports autonegotiation of both ISL and 802.1Q trunks.

Use the steps outlined in the following table to configure a port as an ISL or 802.1Q trunk port:

Table 4-11: Configure a Port

Command

Purpose

3550(config)# interface interface-id

Enter the interface configuration mode and the port to be configured for trunking.

The default mode for Layer 2 interfaces is switchport mode dynamic desirable. If the neighboring interface supports trunking and is configured to allow trunking, the link is a Layer 2 trunk or, if the interface is currently in Layer 3 mode, it becomes a Layer 2 trunk when you enter the switchport interface configuration command.

3550(config-if)# switchport trunk encapsulation {isl | dotlq | negotiate}

Configure the port to support ISL or 802.1Q encapsulation or to negotiate (default) with the neighboring interface for encapsulation type. You must configure each end of the link with the same encapsulation type.

3550(config-if)# switchport mode {dynamic {auto | desirable} | trunk}

Configure the interface as a Layer 2 trunk (required only if the interface is currently a Layer 2

access port or tunnel port, or to specify the trunking mode).

■ dynamic auto—Set the interface to a trunk link if the neighboring interface is set to trunk or desirable mode.

■ dynamic desirable—Set the interface to a trunk link if the neighboring interface is set to trunk, desirable, or auto mode.

■ trunk—Set the interface in permanent trunking mode and negotiate to convert the link to a trunk link even if the neighboring interface is not a trunk interface.

3550(config-if)# switchport access vlan vlan-id

(Optional) Specify the default VLAN, which is used if the interface stops trunking.

3550(config-if)# switchport trunk native vlan vlan-id

Specify the native VLAN for 802.1Q trunks.

Note To reset all trunking characteristics of a trunking interface to the defaults, use the no switchport trunk interface configuration command. To disable trunking, use the switchport mode access interface configuration command to configure the port as a static-access port.

Defining the List of Allowed VLANs on a Trunk

355O(config)# interface fastEthernet O/ll

3550(config-if)# switchport trunk

allowed vlan except

5Ol-lOOl

355O(config-if)# exit

355O(config)# interface fastEthernet O/l2

3550(config-if)# switchport trunk

allowed vlan remove

2-5OO

355O(config-if)# end

35 5O#

show interfaces trunk

Port

Mode Encapsulat

ion Status Native vlan

FaO/11

on isl

trunking 1

FaO/12

on 802.lq

trunking 1

FaO/24

desirable n-isl

trunking 1

Port

Vlans allowed on trunk

FaO/11

1-500,1002-4094

FaO/12

1,501-4094

FaO/24

1-4094

Port

Vlans allowed and active in management domain

FaO/11

1-5,20,30

FaO/12

1

FaO/24

1-5,20,30

Port

Vlans in spanning tree

forwarding state and

not pruned

FaO/11

1-5,20,30

FaO/12

1

FaO/24

1-4,30

© 2002, Cis

co Systems, Inc. All rights reserved.

Only VLANs 2-500 should be carried across this trunk

Only VLANs 2-500 should be carried across this trunk

Only VLANs 501 -1001 should be carried across this trunk

Cisco CCIE Prep v1.0—Module 5-26

By default, a trunk port sends traffic to and receives traffic from all VLANs. All VLAN IDs, 1 to 4094, are allowed on each trunk. However, you can remove VLANs from the allowed list, preventing traffic from those VLANs from passing over the trunk. To restrict the traffic a trunk carries, use the switchport trunk allowed vlan remove vlan-list interface configuration command to remove specific VLANs from the allowed list.

A trunk port can become a member of a VLAN if the VLAN is enabled, if VTP knows of the VLAN, and if the VLAN is in the allowed list for the port. When VTP detects a newly enabled VLAN and the VLAN is in the allowed list for a trunk port, the trunk port automatically becomes a member of the enabled VLAN. When VTP detects a new VLAN and the VLAN is not in the allowed list for a trunk port, the trunk port does not become a member of the new VLAN.

Use the steps outlined in the following table to restrict the VLANs that are carried on a trunk port:

Table 4-12: Restrict VLANs

Command

Purpose

3550(config-if)# switchport trunk allowed vlan {add | all | except | remove} vlan-list

Configure the list of VLANs allowed on the trunk.

The vlan-list parameter is either a single VLAN number from 1 to 4094 or a range of VLANs described by two VLAN numbers, the lower one first, separated by a hyphen. Do not enter any spaces between comma-separated VLAN parameters or in hyphen-specified ranges.

All VLANs are allowed by default. You cannot remove any of the default VLANs (1 or 1002 to 1005) from a trunk.

Note To return to the default allowed VLAN list of all VLANs, use the no switchport trunk allowed vlan interface configuration command.

Note To return to the default allowed VLAN list of all VLANs, use the no switchport trunk allowed vlan interface configuration command.

Configuring the Prune Elig Pruning ble List for VTP

Cisco.com

3550(config)# interface fastEthernet 0/11 3550(config-if)# switchport trunk pruning vlan 2-500

3550(config-if)# exit

3550(config)# interface fastEthernet 0/12 3550(config-if)# switchport trunk pruning vlan 501-1001

3550(config-if)# end

Extended-range VLANs (VLAN IDs 1006 to 4094) cannot be pruned.

© 2002, Cisco Systems, Inc. All rights reservec

Cisco CCIE Prep v1.0—MoCule 5-27

Pruning increases available bandwidth by restricting flooded traffic to those trunk links that the traffic must use to access the destination devices. You can only enable VTP pruning on a switch in VTP server mode. Only VLANs included in the pruning-eligible list can be pruned. By default, VLANs 2 through 1001 are pruning eligible on trunk ports. The pruning-eligible list applies only to trunk ports. Each trunk port has its own eligibility list. VTP pruning must be enabled for this procedure to take effect.

Use the steps outlined in the following table to remove VLANs from the pruning-eligible list on a trunk port:

Table 4-13: Remove VLANs from Pruning

Readers' Questions

  • jenni kemppi
    How to read switch port numbers?
    1 month ago
  • Switch port numbers are typically written in the format of X/Y, where X is the switch number and Y is the port number. For example, 2/12 would refer to port 12 on switch number 2. In some cases, switches will be labeled with the port number only, so it is important to know which switch the port is on.
    • Cedrick
      What are the ports on aswitch?
      2 months ago
    • A switch typically uses ports for connecting devices to the network, such as computers, printers, and servers. The most common type of port on a switch is an Ethernet port. These are typically 10/100/1000 Mbps ports, but other variations such as 1GbE, 10GbE, and 40GbE are also available. Other types of ports found on switches include fiber optic and USB ports.
      • leevi
        Which type of cable should be used when connecting between cisco switches?
        3 months ago
      • To connect two Cisco switches, you should use a crossover Ethernet cable.
        • cormac russell
          How many types of switch in networking?
          5 months ago
        • There are five types of switches commonly used in networking: Unmanaged switches, Managed switches, Layer 2 switches, Layer 3 switches, and Multilayer switches.
          • sandro
            Why are some fastethernet ports on the switches are up and others are down?
            6 months ago
          • FastEthernet ports can be down for various reasons, such as poor physical connection, incorrect configuration, hardware or software failure, or bad cables. If cable is connected, the port may be down due to a wrong port configuration, such as speed or duplex mismatch. It might also be due to hardware or software problems. If everything is configured correctly, but the port is still down, it could be an indication of a hardware failure.
            • abeba
              Which port mode on a switch enables that port to manage traffic for multiple vlans?
              6 months ago
            • The port mode on a switch that enables it to manage traffic for multiple VLANs is called trunk mode.
              • alexander
                Which of the following ports are used as interface ports for printers?
                7 months ago
              • The most commonly used interface ports for printers are USB, Parallel, Ethernet, and Wi-Fi.
                • Jaska
                  What does ccie stand for?
                  7 months ago
                • Cisco Certified Internetwork Expert (CCIE)
                  • RIIA
                    Which statement is true regarding virtual local area networks (vlans)?
                    7 months ago
                  • VLANs allow network administrators to segment network traffic, thereby enhancing network security and performance.
                    • mae
                      Which port on a switch manages traffic for multiple vlans?
                      7 months ago
                    • A switch port that is configured as an Access port or a Trunk port can manage traffic for multiple VLANs.
                      • KASEY MOORE
                        What vlans are allowed across a trunk when the range of allowed vlans is set to the default value?
                        7 months ago
                      • The default range of allowed VLANs across a trunk is from VLAN 1 to VLAN 4094.
                        • ROSA BRANDYBUCK
                          What does vlan stand for?
                          7 months ago
                        • VLAN stands for Virtual Local Area Network.
                          • philipp
                            What type of switch connects users to the network?
                            7 months ago
                          • A network switch is a networking device that connects devices on a computer network by using packet switching to receive, process, and forward data to the destination device.
                            • Reiss
                              When configuring vlans on a switch what is used to identify which vlan a device belongs to?
                              7 months ago
                            • VLAN ID
                              • Bercilac
                                What four trunk database?
                                7 months ago
                                1. Oracle
                                2. Microsoft SQL Server
                                3. PostgreSQL
                                4. MySQL
                                • Kelly
                                  Which of the following are true regarding using multiple vlans on a single switch?
                                  7 months ago
                                  1. Multiple VLANs can be used to logically segment a switch.
                                  2. A single VLAN can span multiple switches.
                                  3. VLANs can be used to reduce broadcast traffic levels.
                                  4. VLANs require dedicated physical connections between switches.
                                  • yerusalem haile
                                    What cisco device is used to add ports to a cisco product?
                                    8 months ago
                                  • A Cisco switch expansion module is used to add ports to Cisco products.
                                    • mollie
                                      What is difference between vlan access and trunk mode?
                                      8 months ago
                                    • VLAN Access mode is used to connect a single host (typically a computer) to the network, allowing it to communicate with other devices on the same VLAN. Trunk mode is used to connect multiple computers on the same VLAN, allowing them to communicate with each other and other devices on the same VLAN. Trunk mode also allows for inter-VLAN communication, allowing computers from one VLAN to communicate with computers on other VLANs.
                                      • jessica
                                        How to check cisco switch port status?
                                        8 months ago
                                      • To check the port status on a Cisco switch, use the show interface command. This command will display the interface type, the number of packets sent and received, the port status, errors, and other parameters. The port status will be listed as “up” or “down” depending on the status.
                                        • Pinja
                                          When configuring vlans on a switch what type of switch ports are members of all vlans?
                                          8 months ago
                                        • Access ports.
                                          • callan
                                            Which two modes does cisco recommend when configuring a particular switch port (choose two.)?
                                            8 months ago
                                            1. Access Mode
                                            2. Trunk Mode
                                            • Cleo
                                              What is the only type of second vlan of which an access port can be a member?
                                              8 months ago
                                            • The only type of VLAN that an access port can be a member of is the default VLAN (VLAN 1).
                                              • Ulderico
                                                When configuring vlans on a switch what type of switch ports?
                                                8 months ago
                                              • Access and Trunk ports
                                                • giancarlo
                                                  How to configure trunk port on cisco switch?
                                                  8 months ago
                                                  1. Log into your Cisco switch using the console or SSH.
                                                  2. Enter “enable” mode.
                                                  3. Enter “Configure Terminal” mode.
                                                  4. Identify the interface you wish to configure as a trunk port.
                                                  5. Enter “interface” mode.
                                                  6. Enter “switchport mode trunk”.
                                                  7. If necessary, configure the trunk port with an IP address by typing “IP address <IP address> <subnet mask>”.
                                                  8. Configure the native VLAN for the trunk port by typing “switchport trunk native vlan <VLAN ID>”.
                                                  9. Configure the allowed VLANs for the trunk port by typing “switchport trunk allowed vlan <VLAN ID1, VLAN ID2, …>”.
                                                  10. Configure the trunk encapsulation type by typing “switchport encapsulation <type>”. The type can be either dot1q or ISL.
                                                  11. Finally, save the configuration by typing “write memory”.
                                                  • Valentin
                                                    How to show trunk ports on cisco switch?
                                                    8 months ago
                                                    1. To view the port status of a single trunk port, use the "show interfaces status" command, followed by the port number.Example: Switch# show interfaces status FastEthernet0/
                                                    2. 1 To view the status of all trunk ports, use the "show interfaces trunk" command.Example: Switch# show interfaces trunk
                                                    3. To view the port settings of a single trunk port and its associated VLANs, use the "show interfaces switchport" command, followed by the port number.Example: Switch# show interfaces switchport FastEthernet0/1
                                                    • JUKKA LOIRI
                                                      Which two modes does cisco recommend when configuring a particular switch port?
                                                      8 months ago
                                                      1. Access mode
                                                      2. Trunk mode
                                                      • heikki kokko
                                                        What is switchport mode access?
                                                        8 months ago
                                                      • Switchport mode access is a command used to configure a port on a switch as an access port. This allows the port to provide access to a single host by placing the port into a specific VLAN.
                                                        • Mia
                                                          What is a Switchport?
                                                          1 year ago
                                                        • A switchport is a network port on the Uplink Module (or the switch) that is used to connect multiple devices together. A switchport can have one or more Ethernet cables connected to it, allowing the network to be configured in a variety of ways.
                                                          • marko gerber
                                                            What are the 4 ports on the side of the switch?
                                                            1 year ago
                                                          • thomas
                                                            Is a switch port and drop point the same?
                                                            1 year ago
                                                          • No, a switch port is the hardware used to connect a device, such as a computer or printer, to a network. A drop point is a point in the network where traffic is routed or dropped off.
                                                            • finn
                                                              What type of switch port do you connect ids to?
                                                              1 year ago
                                                            • You would connect an Intrusion Detection System (IDS) to a network port that is configured with a SPAN (Switched Port Analyzer) or Mirror port.
                                                              • karla
                                                                Which port are reserved on a switch.?
                                                                1 year ago
                                                              • The switch ports are typically numbered from 1 to 48 or higher, depending on the type and size of the switch. Port numbers from 1 to 1024 are typically reserved for system use, so these ports are not available for end user connections.
                                                                • doris
                                                                  What does www mean in a cisco port list?
                                                                  1 year ago
                                                                • WWW stands for World Wide Web, and is typically used when referring to the web access ports in a Cisco port list. This typically refers to ports 80 and 443, which are used for http and https traffic respectively.
                                                                  • MULU
                                                                    What switch port 4/17 means?
                                                                    1 year ago
                                                                  • Switch port 4/17 refers to port number 17 on switch 4. This is a type of port addressing used to uniquely identify ports on physical switches.
                                                                    • tomas
                                                                      How many ports available in switches?
                                                                      1 year ago
                                                                    • The number of ports available in a switch can vary widely, typically ranging from 8 to 48 or more ports.
                                                                      • Abbie
                                                                        How does a port switch work?
                                                                        1 year ago
                                                                      • A port switch is a device that connects multiple computers, printers, or any other network-enabled devices together via a wired or wireless connection. It works by receiving data packets (often referred to as frames) that are sent by computers, printers, and other network devices. The port switch then examines each frame and determines where it needs to be sent and sends it to the appropriate destination port. By using this technique, the switch makes sure a frame of data sent from one port is not received by another port. This allows for more efficient communication between multiple devices and enables more devices to be networked together.
                                                                        • feaven
                                                                          How many types dlink switch ports?
                                                                          1 year ago
                                                                        • There are several types of D-Link switch ports, including Fast Ethernet, Gigabit Ethernet, SFP, and PoE.
                                                                          • virgilio
                                                                            What are the types of ports in cisco?
                                                                            1 year ago
                                                                            1. Ethernet Ports
                                                                            2. Console Ports
                                                                            3. Auxiliary Ports
                                                                            4. Serial Ports
                                                                            5. Fast Ethernet Ports
                                                                            6. Gigabit Ethernet Ports
                                                                            7. USB Ports
                                                                            8. PoE Ports
                                                                            9. ISDN BRI U-Interfaces
                                                                            10. ATM Ports
                                                                            • gianni
                                                                              How many types of switchs and ports?
                                                                              1 year ago
                                                                            • There are three types of switches and ports: unmanaged switches, managed switches, and intelligent switches. Unmanaged switches are typically used for simple networks and provide basic connections. Managed switches offer greater control over network traffic and prioritize network traffic. Intelligent switches are specialized switches that are connected to a network and are able to monitor and prioritize network traffic attributes.
                                                                              • Uta
                                                                                How many types of switch port?
                                                                                1 year ago
                                                                              • There are generally three types of switch port: Ethernet, Fast Ethernet, and Gigabit Ethernet.
                                                                                • longo
                                                                                  Which types of ports can belong to only one vlan at a time?
                                                                                  1 year ago
                                                                                • Access ports

                                                                                  Disclosure: Some of the links above are affiliate links. This means that, at zero cost to you, I will earn an affiliate commission if you click through the link and finalize a purchase.

                                                                                  Command

                                                                                  Purpose

                                                                                  3550(config-if)# switchport trunk pruning vlan {add | except | none | remove} vlan-list [,vlan[,vlan[,,,]]

                                                                                  Configure the list of VLANs allowed to be pruned from the trunk.

                                                                                  Separate nonconsecutive VLAN IDs with a comma and no spaces; use a hyphen to designate a range of IDs. Valid IDs are from 2 to 1001. Extended-range VLANs (VLAN IDs 1006 to 4094) cannot be pruned.

                                                                                  VLANs that are pruning-ineligible receive flooded traffic.

                                                                                  The default list of VLANs allowed to be pruned contains VLANs 2 to 1001.

                                                                                  Note To return to the default pruning-eligible list of all VLANs, use the no switchport trunk pruning vlan interface configuration command.

                                                                                  Note To return to the default pruning-eligible list of all VLANs, use the no switchport trunk pruning vlan interface configuration command.

                                                                                  This section discusses the configuration of Tunnel Ports on the Catalyst 3550. Tunneling is a feature designed for service providers who carry traffic of multiple customers across their networks and are required to maintain the VLAN and Layer 2 protocol configurations of each customer without impacting the traffic of other customers. The Catalyst 3550 switch supports 802.1Q tunneling and Layer 2 protocol tunneling.

                                                                                  Continue reading here: Q Tunneling

                                                                                  Was this article helpful?

                                                                                  +9 0