switchport trunk allowed vlan x

[ITexpert]

Hello Guys,

@Joseph W. Doherty, @Richard Burts @Julio E. Moisa @Francesco Molino 

I have some access points which are connected in access mode (set in default) in vlan 1 but there is command issued: switchport trunk allowed vlan 40.41,  

If port is connected in vlan 1 and device is getting Ip from vlan 1 and working and what's the purpose of having switchport trunk allowed vlan 40,41  ?  usually we use this command if port is in trunk mode and then this will limit the vlan passing from trunk ?

why switchport trunk allowed command is working even if port is in access mode ?

Thanks

[Julio E. Moisa]

Hi

The trunk port is used when you have multiple SSID configured on the AP and those SSID are assigned to different VLANs. 

Your could be removed that line.

:-)

[ITexpert]

Hello @Julio E. Moisa 

Yeah thats the scenario,  what difference it will made by removing that command ? whats the best practice and why ?

Its very strange that switchporttrunk allowed vlan works with access mode.  ?

[Julio E. Moisa]

Hi

Actually if your configuration has: switchport mode access, the command switchport trunk allow vlan .... is not taking effect at all and you can remove without generate any trouble. 

[Richard Burts]

I agree with Julio that you can remove that command with no impact to the switch. The thing to understand is that the switchport trunk allowed command is only effective if the port is acting in trunk mode. If the port is configured and acting as access mode it will accept the config command for trunk allow but the command is not used.

HTH

Rick

[ITexpert]

Hello @Julio E. Moisa @Richard Burts

whats the best practice  to connect cisco AP (access or trunk with allowed vlan), with multiple SSID's controlled by WLC ?

Does connected in trunk mode and then limited to SSID's vlan's provide any additional security ?

Thanks  

[Julio E. Moisa]

Hi,

for Multiple SSID is recommended trunk. From the WLC you can handle everything. 

[ITexpert]

Hello @Julio E. Moisa, One more question, Either AP connected in Access or trunk mode , it will still use CAPWAP tunnel to WLC for data traffic.

Thanks

[Julio E. Moisa · Accepted solution]

Hi

Yes, that is correct.

:-)