ASA 5505 Base License Trunk Ports

[haidar_alm]

Hi guys,

I'm doing some reading up on the ASA 5505 license features and noticed that with Base License you cannot use Trunk ports. So, I fired up the ASA and noticed that this was correct when trying to apply the command:

ciscoasa(config-if)# switchport mode trunk
ERROR: Trunk port is not supported with this license

However, I noticed that I can still run other trunk commands such as below:

ciscoasa(config-if)# swi trunk allowed vlan 20-21,28

and

ciscoasa(config-if)# switchport trunk native vlan 28

And, it looks like this is allowing more than one Vlan communication through the interface.. Am I missing something here?

[Karsten Iwen · Accepted solution]

These commands have no effect while the port is in access-mode. It's still not a trunk.

[haidar_alm]

In this case, which vlan is being used as an access Vlan then, the native one 28?

[Karsten Iwen]

It's the vlan that is configured with "switchport access vlan X". If that command is not configured, it's vlan 1.

[haidar_alm]

Strange because Vlan 20 is pingable from the other side connected to this interface...

[Karsten Iwen]

You can check the applied vlan with "sh switch vlan".

[haidar_alm]

I just did and you are right!

Thanks for your reply!