Thursday, October 11, 2018

switchport trunk allowed vlan 200 vs switchport access vlan 200

Hello folks,

I've been looking our cisco config for the past day (2960X) and I was curious with something that someone in our team added.

What's the actual difference between using switchport trunk allowed vlan 210 and switchport access vlan 210 ?

interface GigabitEthernet1/0/1

switchport trunk allowed vlan 210

switchport mode trunk

spanning-tree bpdufilter enable

spanning-tree bpduguard enable

end

interface GigabitEthernet1/0/2

description esx-1

switchport access vlan 210

switchport mode access

spanning-tree bpdufilter enable

spanning-tree bpduguard enable

end

I don't really see the difference between the two, except that one is trunked and restricted to only vlan 210, and the other one is just an access limited to vlan 210 ?

Could that possibly be a mistake or just some trivial stuff that doesn't matter ?

What's the point of having a trunk port but restricted, instead of an access ?



No comments:

Post a Comment