topic Re: Command Status in Network Security

Command Status

ray_stone — Mon, 11 Mar 2019 20:35:54 GMT

Hi,

Please confirm the following commands are using for which purpose?

interface FastEthernet0/4
description User Connection
switchport trunk encapsulation dot1q
switchport mode access
switchport voice vlan 102
no cdp enable
spanning-tree portfast

Is Switch Port configured as a Trunk Port or Access port and what V-LAN traffic being bypass via this port,

Re: Command Status

ray_stone — Fri, 20 May 2011 02:29:03 GMT

The last question was for the following commands. I used the wrong one commands:

interface FastEthernet0/5
description Uplink to WAN router
switchport access vlan 4
switchport trunk encapsulation dot1q
switchport mode access
switchport voice vlan 102
no cdp enable
spanning-tree portfast

Please confirm about the above commands and same question is applied in my previous post.

Re: Command Status

Maykol Rojas — Fri, 20 May 2011 02:46:32 GMT

This post should be on Lan switching. Im not quite sure, you can do a show interface trunk, if you see fastethernet listed, the port is functioning on trunk. Also, you can do a show vlan, and if the switchport is not assigned to vlan 4 as depicted, the port definetly is on trunk.

Mike.

Re: Command Status

Maykol Rojas — Fri, 20 May 2011 02:59:27 GMT

Just tested, the port is in access.

Mike

Re: Command Status

ray_stone — Fri, 20 May 2011 03:50:26 GMT

If the switch port is connected with router interface and the given commands are configured on switch port then is it possible that we could allow two V-LAN traffic through the router even you have tested that it's still in access mode.

I have fetch out this switch info from one of new customer and understanding why the given commands are using for which purpose as i also think that it should be working in a access mode until we configure switch port in trunk port.

Please confirm.

Re: Command Status

ray_stone — Fri, 20 May 2011 03:51:15 GMT

Please confirm.

Re: Command Status

Ramraj Sivagnanam Sivajanam — Mon, 30 Jul 2012 10:19:32 GMT

Hi Bro

The configuration provided is done by someone who has no idea what they are doing. A trunk port would like like this, and like this only.

interface FastEthernet0/4

description Uplink Trunk Port

switchport trunk encapsulation dot1q

switchport mode trunk

switchport nonegotiate

spanning-tree portfast trunk

and a access port would look like this and like this only.

interface FastEthernet0/5

description User Connection (Voice / Data) --> Access Port

switchport access vlan 4

switchport mode access

switchport voice vlan 102

no cdp enable

spanning-tree portfast

interface FastEthernet0/6

description Uplink to WAN Router --> Access Port

switchport access vlan 4

switchport mode access

P/S: If you think this comment is helpful, please do rate them nicely 🙂

Re: Command Status

nkarthikeyan — Mon, 30 Jul 2012 13:27:54 GMT

Hi Ray,

This is not a valid trunk configuration. You cannot have trunk and access configured for the same interface.

Please do rate if the given information helps.

Karthik