cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
692
Views
0
Helpful
6
Replies

Port configuration in Access mode

cguadall
Beginner
Beginner

Is it possible to configure/force one port to be configured as acces-mode from dashboard?

6 Replies 6

balaji.bandi
VIP Community Legend VIP Community Legend
VIP Community Legend

Yes, It is a CBS. We have no problem configuring a port in access-mode from switch GUI.

 

We want to configure the port from the Cisco Business Dashboard.

balaji.bandi
VIP Community Legend VIP Community Legend
VIP Community Legend
Cisco Business Dashboard

i am not a big user of CBS, Is this located in cloud ? what option you have ?

 

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

David Harper
Cisco Employee
Cisco Employee

Hi there,

 

The dashboard doesn't expose the acces vs trunk setting.  Rather it always configures the port as a trunk and just allows and denies vlans on the trunk based on your configuration.  If you only select a single access vlan for a port in dashboard, then the end result is a trunk port with the native vlan set and no other vlans allowed.

 

Is there a particular reason why you need an access port role rather than a trunk with only a native vlan enabled?

 

Cheers,

Dave.

Hi Dave,

 

We consider a best practice to configure as access-mode the ports where only one VLAN is needed.

 

- Configure all user-facing ports as non-trunking (DTP off) --> https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Security/Baseline_Security/securebasebook/sec_chap7.html

 

 

In addition, we are facing In some strange cases when we add a VLAN to a profile, this new VLAN is added to some undesired trunks ports.

I understand where you are coming from.  Do bear in mind that the best practices you cite are aimed at the Catalyst switch line which support a number of features that are not supported in the Cisco Business portfolio.  In particular, DTP is not supported by the Cisco Business switches, so in the context of those guidelines, a trunk port on a Cisco Business switch with only a native vlan configured and permitted will function the same as an access port.  Only untagged frames will be accepted in to the native vlan and tagged frames with any other vlan ID will be discarded.  And since there is no dynamic negotiation supported for the VLANs being trunked, the only way to change the behaviour is to reconfigure the switch.

 

With regards to the second point you raised, when you add a new vlan to a device group with multiple network devices in it, the dashboard will also explicitly enable the vlan on links that interconnect those devices in order to make sure the vlan in contiguous across the device group.  Does that explain what you are seeing, or are the undersired ports connected to something else?

 

Cheers,

Dave.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers