Network Access (2.0)

 

CONFIGURE AND VERIFY VLANS SPANNING MULTIPLE SWITCHES.

2.1.a  Access Port

2.1.b  Default Vlan

2.1.c   Connectivity

___________


THE COMMAND switchport trunk allowed vlan 10,20  MEANS THAT THE TRUNK PORT WILL ONLY CARRY VLANS 10 AND 20. THIS COMMAND IS USED TO RESTRICT THE TRAFFIC THAT CAN PASS THROUGH A TRUNK PORT.

A TRUNK PORT IS A TYPE OF NETWORK PORT THAT CAN CARRY MULTIPLE VLANS. THIS ALLOWS DEVICES ON DIFFERENT VLANS TO COMMUNICATE WITH EACH OTHER. HOWEVER, IT CAN ALSO BE A SECURITY RISK IF YOU DON'T WANT ALL VLANS TO BE ABLE TO COMMUNICATE WITH EACH OTHER.

THE  switchport trunk allowed vlan COMMAND ALLOWS YOU TO SPECIFY WHICH VLANS ARE ALLOWED ON A TRUNK PORT. THIS PREVENTS TRAFFIC FROM OTHER VLANS FROM PASSING THROUGH THE PORT.

IN THE EXAMPLE ABOVE, THE COMMAND  switchport trunk allowed vlan 10,20   WILL ONLY ALLOW VLANS 10 AND 20 TO PASS THROUGH THE TRUNK PORT. TRAFFIC FROM ANY OTHER VLAN WILL BE DROPPED.

_____________


Comments