Understanding DTP (Dynamic Trunking Protocol) for CCNA
DTP is a Cisco-proprietary protocol that automatically negotiates the formation of a trunk link between two switches.
What is DTP?
The **Dynamic Trunking Protocol (DTP)** is a proprietary Cisco protocol that automatically negotiates trunking on a link between two Cisco switches. It simplifies configuration by allowing switches to dynamically determine whether a link should be an access port or a trunk port based on DTP frames exchanged between them.
DTP Modes Explained
Switch ports operate in various DTP modes. **Dynamic Auto** makes the port willing to become a trunk if the other side requests it. **Dynamic Desirable** actively attempts to convert the link to a trunk. If both sides are dynamic auto, they will passively wait and settle as access ports. To force a trunk, use `switchport mode trunk`.
Security Implications and Best Practices
While convenient, leaving DTP enabled can pose a security risk, allowing attackers to perform VLAN hopping by spoofing DTP frames. Best practice dictates disabling DTP entirely by statically configuring ports as access or trunk, and using the `switchport nonegotiate` command on trunk ports to prevent DTP frame generation.
❓ Frequently Asked Questions
What is the default DTP mode on newer Cisco switches?
Newer Cisco Catalyst switches typically default to Dynamic Auto mode.
How do you disable DTP on a switch port?
Configure the port statically (e.g., `switchport mode access`) or use `switchport nonegotiate` on static trunks.
Does DTP negotiate the encapsulation type?
Yes, on older switches that support ISL and 802.1Q, DTP can negotiate the encapsulation method.