cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
452
Views
4
Helpful
3
Replies

ISL trunk with a pc connecting on it.

wuh
Level 1
Level 1

I just read a post where one of you said if a pc connects to a switch port that is configured as ISL trunk, it should be isolated.

I just did a test about this. The PC can ping the gateway that is on the siwtch it connects to. The port is ISL trunk.

is this test result reasonalbe? or am i missing something here?

Thanks!

interface FastEthernet0/1

switchport trunk encapsulation isl

switchport trunk allowed vlan 1

switchport mode dynamic desirable

end

1 Accepted Solution

Accepted Solutions

Giuseppe Larosa
Hall of Fame
Hall of Fame

Hello Han,

when I mentioned an ISL trunk I was meaning a port that is a trunk always not as a result of DTP negotiation

try the following

int fas0/1

switchport mode trunk

in this case the port is always a trunk and doesn't need to negotiate a trunk using DTP (another Cisco L2 protocol) like in your config. The PC doesn't asnwer to DTP messages and the port reverts to mode access

In your scenario if you use

sh int fas0/1 switchport

you should see

admin state : trunk or dynamic desirable

operational state: access port

your port should act as an access port in Vlan1 and as a result of this the PC is not isolated and can ping the default gateway on Vlan1.

Hope to help

Giuseppe

View solution in original post

3 Replies 3

mahmoodmkl
Level 7
Level 7

Hi

its because u have made the allowed vlan as 1 on the port which will be the default vlan.

As u r management IP configured under VLAN 1 SVI it should be able to ping it.

Thanks

Mahmood

Giuseppe Larosa
Hall of Fame
Hall of Fame

Hello Han,

when I mentioned an ISL trunk I was meaning a port that is a trunk always not as a result of DTP negotiation

try the following

int fas0/1

switchport mode trunk

in this case the port is always a trunk and doesn't need to negotiate a trunk using DTP (another Cisco L2 protocol) like in your config. The PC doesn't asnwer to DTP messages and the port reverts to mode access

In your scenario if you use

sh int fas0/1 switchport

you should see

admin state : trunk or dynamic desirable

operational state: access port

your port should act as an access port in Vlan1 and as a result of this the PC is not isolated and can ping the default gateway on Vlan1.

Hope to help

Giuseppe

Giuseppe:

thanks, that makes sense to me. I misunderstood your post.

Han

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: