cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1128
Views
0
Helpful
4
Replies

can native vlan 1 be blocked using dot1q/ISL?

sarahr202
Level 5
Level 5

hi every body!

I want to know can i block nativa vlan 1 by:

switchport trunk encapsulation dot1q

switchport trunk allowed vlan except 1

or

switchport trunk allowed vlan remove 1

Using ISL:

switchport trunk encapsulation isl

switchport trunk allowed vlan except 1

or

switchport trunk allowed vlan remove 1

thanks!

2 Accepted Solutions

Accepted Solutions

bvsnarayana03
Level 5
Level 5

You cant remove native vlan from trunk. However, you can change the native vlan from default of 1 to some other vlan number.

"switchport trunk native vlan x"

View solution in original post

Jon Marshall
Hall of Fame
Hall of Fame

Sarah

As already mentioned you can change the native vlan to be something other than vlan 1. The native vlan is simply the vlan that is sent across a trunk without a tag. By default it is vlan 1.

Cisco recommend using a dummy vlan for the native vlan ie. a vlan that is not routed and has no devices connected into it.

If you make the native vlan a vlan other than vlan 1 it is important to note that vlan 1 will still be used to send DTP,VTP,PagP frames which will be tagged.

You can if you want to make sure that the native vlan is tagged by using the command

vlan dot1q tag native

Jon

View solution in original post

4 Replies 4

bvsnarayana03
Level 5
Level 5

You cant remove native vlan from trunk. However, you can change the native vlan from default of 1 to some other vlan number.

"switchport trunk native vlan x"

thanks for your reply. I applogise for posting multiple instances of same post by mistake.

Have a nice day!

Jon Marshall
Hall of Fame
Hall of Fame

Sarah

As already mentioned you can change the native vlan to be something other than vlan 1. The native vlan is simply the vlan that is sent across a trunk without a tag. By default it is vlan 1.

Cisco recommend using a dummy vlan for the native vlan ie. a vlan that is not routed and has no devices connected into it.

If you make the native vlan a vlan other than vlan 1 it is important to note that vlan 1 will still be used to send DTP,VTP,PagP frames which will be tagged.

You can if you want to make sure that the native vlan is tagged by using the command

vlan dot1q tag native

Jon

Thanks jon for your reply!

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card