Cannot remove trunk allowed from access port on 6800IA

[tdorsey123]

Hi All,

On a 6800IA Fex hanging off a 6880-X I am not able to remove the "switchport trunk allowed vlan 1" statement from a switchport I have set to mode access.  Yes I have tried "no switchport trunk allowed" on the port config.

interface GigabitEthernet110/1/0/45
 description Server XYZ
 switchport
 switchport trunk allowed vlan 1      <-- Can't remove this
 switchport mode access
 switchport access vlan 70
 spanning-tree portfast edge

I can change it to none but I can't remove it.  Seems like an odd bug/feature.

Running: c6880x-ipservicesk9-mz.SPA.152-1.SY1a.bin

Any Ideas?

[Reza Sharifi]

Hi,

so "no switchport trunk allowed vlan 1 " does not work?

What is the error message you get?

HTH

[tdorsey123]

No error message.  It looks like the command works(i.e. It returns to the config prompt with no error) but that does not work.

[Reza Sharifi]

Can you try "switchport trunk allowed vlan remove 1"

and than 

"no switchport trunk allowed vlan none"

If it still does not work, its probably a bug.

HTH

[tdorsey123]

Tried both of those as well as switching the port to trunk mode.  Still can't remove it.

[Reza Sharifi]

Open a ticket with TAC.  Most likely they will ask you to upgrade.

Good luck!

[andrewswanson]

Hi - this command can't be removed from the 6800ia interfaces - see link below

hth

Andy

http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-6800ia-switch/qa_c67-728684.html

Q.    Why is the default configuration of Instant Access client host port configuration “switch trunk allowed vlan 1” and not “all”?

A.     Each Instant Access host port can be configured in access or trunk mode (default is dynamic). If in trunk mode, there is a constraint as to how many VLANs can be trunked on each port.

Note:    No more than 1,000 VLANs can be associated with a single FEX ID, divided by the number of Instant Access trunk ports. To make sure that this constraint is followed, implementation requires specifying explicitly which VLANs will be trunked. We recommend no more than 20 VLANs per Instant Access trunk port
 (up to the total of 1000 per FEX), to limit the amount of BPDU processing.

[Leo Laohoo]

conf t

default interface GigabitEthernet110/1/0/45

end

[tdorsey123]

Oh I hadn't thought about that.  However that didn't work either thanks Leo.

s-core01.curtner#sh run int g110/1/0/40
Building configuration...

Current configuration : 168 bytes
!
interface GigabitEthernet110/1/0/40
 switchport
 switchport trunk allowed vlan 1
 switchport mode access
 switchport access vlan 70
 spanning-tree portfast edge
end

s-core01.curtner#conf t

s-core01.curtner(config)#default int g110/1/0/40
Interface GigabitEthernet110/1/0/40 set to default configuration

s-core01.curtner(config)#do sh run int g110/1/0/40
Building configuration...

Current configuration : 118 bytes
!
interface GigabitEthernet110/1/0/40
 switchport
 switchport trunk allowed vlan 1
 switchport mode dynamic auto

[Leo Laohoo]

I think that's a bug.  

As what Reza said, raise a TAC Case. 

[tdorsey123]

I found that Googling too.  It does not explain why I can't remove the allowed vlan command.

[EnsonoTAC]

Try to change switchport mode to trunk, then allowed vlan none and back to access mode:

switchport mode trunk
switchport trunk allowed vlan none
switchport mode access

[090909090909093hfuew]

Problem solved:

configure
"enter the interface:"
interface GigabitEthernet110/1/0/45
"configure ta random acces vlan"

switchport mode access

switchport access vlan 999

"then, remove those two lines"
no switchport trunk allowed vlan none

no switchport access vlan 999
exit

Work with me. Bye - 
Regards

Gustavo Staudt