📖 What is Access Port?
A switch port configured to carry traffic for only one specific VLAN. End devices like PCs and printers are typically connected to access ports.
🥋
Sensei Says:
"When configuring an access port, always use 'switchport mode access' to disable DTP and prevent the port from accidentally forming a trunk."
📚 Certification: Certified Network Associate (200-301)
🔑 What are the Key Concepts of Access Port?
- ▸ Untagged traffic processing (with the exception of Voice VLANs)
- ▸ Hardcoding switchport modes to mitigate VLAN hopping attacks
- ▸ Association with a single data VLAN
🎯 How does Access Port appear on the 200-301 Exam?
Assigning a newly connected workstation to the Sales VLAN.
Securing an edge port by hardcoding it to access mode and disabling negotiation.
❓ Frequently Asked Questions
What happens if an access port receives a tagged 802.1Q frame?
The switch drops the frame since an access port is only expecting untagged traffic (unless configured with a Voice VLAN).
Why explicitly configure 'switchport mode access'?
To disable dynamic negotiation (DTP), which improves security by preventing an attacker from forming an unauthorized trunk link.
Related Terms from Certified Network Associate
IEEE 802.1Q
Simple Network Management Protocol (SNMP)
Exploit
REST (Representational State Transfer)
Link-Local Next-Hop
Spanning Tree Protocol (STP)