Difference Between Trunk And Tagged Port - Cisco - Server Fault

1. 1. Home
   2. Questions
   3. Tags
   4. Users
   5. Jobs
   6. Companies
   7. Unanswered
2. Teams

   Ask questions, find answers and collaborate at work with Stack Overflow for Teams.

   Try Teams for free Explore Teams
3. Teams

4. Ask questions, find answers and collaborate at work with Stack Overflow for Teams. Explore Teams

Teams

Q&A for work

Connect and share knowledge within a single location that is structured and easy to search.

Learn more about Teams Difference between trunk and tagged port Ask Question Asked 11 years, 6 months ago Modified 6 years, 3 months ago Viewed 53k times 5

I am reading some wikipedia articles and RFC 5517, studying VLANs, and I don't recognize the difference between a trunk port and a tagged port.

From what the material I am reading says, a tagged port is used to allow a host to be seen from different VLANs. So for example if the port 1 is tagged on "vlan 1", and also tagged on "vlan 2", it can send level 2 packets to every host in both VLANs.

The definition of trunk port that I've found is "a port in which travel packets containing the VLAN TAG". The VLAN TAG contains the VLAN ID, so from what I've understood a trunk port must necessarily be a tagged port, but may a switch have a port which is tagged, but not a trunk port? If yes, what's the difference?

PS: I am mostly concerned about Cisco switches.

• cisco
• port
• switch
• vlan
• trunk

Share Improve this question Follow asked Jun 7, 2013 at 18:36 Ramy Al ZuhouriRamy Al Zuhouri 26111 gold badge44 silver badges1414 bronze badges 1

• Cisco using term trunk and access while other vendors using Tag and untag. – Habib Ullah Commented Sep 4, 2018 at 10:25

Add a comment |

5 Answers 5

Sorted by: Reset to default Highest score (default) Date modified (newest first) Date created (oldest first) 1

First let me state that I'm over simplifying this a lot and I'm also making assumptions we are talking about Cisco switches and not necessarily some of the routers or advanced ways of handling traffic.

My Cisco knowledge tends to blend with others like Juniper and Extreme, but...

"a tagged port is used to allow a host to be seen from different VLANs" - no/not necessarily, depends on lots of factors.

Trunk ports are typically used in switch to switch or switch to router links or between ports that require multiple VLANs. They are used to transmit packets from multiple VLANs between gear usually and will add 802.1q tags to the traffic to differentiate between VLANs. By default a trunk port will pass traffic for all VLANs but you can set allowed VLANs to further lock it down.

"static" Access ports belong to a single VLAN and accept traffic only from that same VLAN.

Other vendors besides Cisco will let you tag "access ports", for instance Extreme doesn't even call them trunk/access, you start with an untagged port and tag it with multiple VLANs as necessary.

This pic might help since there are other ways to do things like a dynamic access port or voice port nowadays:

Hope that helps.

REFERENCES: http://www.cisco.com/en/US/docs/switches/lan/catalyst3550/software/release/12.1_19_ea1/configuration/guide/swvlan.pdf

Share Improve this answer Follow answered Jun 7, 2013 at 19:08 TheCleanerTheCleaner 33k2828 gold badges138138 silver badges195195 bronze badges Add a comment | 1

a trunk port is required to forward multiple vlans between switches. each ethernet frame is tagged with vlan membership. The trunk port is configured with 802.1q encapsulation to carry the vlan membership in an Ethernet frame.

Share Improve this answer Follow answered Jun 4, 2015 at 19:20 CiscoNet SolutionsCiscoNet Solutions 4633 bronze badges Add a comment | 0

so from what I've understood a trunk port must necessarily be a tagged port, but may a switch have a port which is tagged, but not a trunk port? If yes, what's the difference?

Yes, if your port is in mode access, it's tagged but is not a trunk port. The different is that the port in trunk mode allows traffic from multiple tagged pass through it. Access port is only allows traffic with specify tagged pass through it.

Share Improve this answer Follow answered Jun 7, 2013 at 19:12 cuonglmcuonglm 2,40622 gold badges1717 silver badges2020 bronze badges 3

• Let me see if I have understood: if I have a host A linked to a switch in a VLAN 1 port, and this switch is linked to another switch on a trunk port on VLAN 2, and the other switch has a host B on VLAN 1, then the ports linking A and B to their respective switch need to be tagged, so that the trunk port can recognize the VLAN. If instead A and B are linked to the same switch and belong to the same VLAN, also an untagged port is ok. Is that right? – Ramy Al Zuhouri Commented Jun 7, 2013 at 20:24
• Can you give some picture for your question, it seems to be not clear for me. – cuonglm Commented Jun 8, 2013 at 1:20
• 1 'Tag' means a 802.1q vlan tag. You cannot have a tag on an access port unless you get into specialized auxiliary(voice/etc...) vlans. You can mark an access (untagged!) port as a member of a vlan, but that only matters logically inside the switch. – cpt_fink Commented Jun 8, 2013 at 4:44

Add a comment | 0

No, An access port is not tagged. A vlan tag indentifier is only added to the frame when it traverses a Trunk port, simple as that. the port configuration of "access vlan 20" for example, is simply telling the switch which vlan it belongs too.

if the destination is the same vlan and on the same switch, NO tagging occurs at all.

Share Improve this answer Follow answered Jun 4, 2015 at 9:43 James DaviesJames Davies 1 Add a comment | 0

I assume we are talking about 802.11q. To create a trunk port you need to set that port to tagged. All other port in that Vlan are untagged. The switch will add a tag to all.

You can have tag ports. Tag port mean the packets have already a VLAN-tag, i.e. they are tagged by the network device connected to this port.Your switch will not add or remove the tag. It depend on you what you want to do with that packet.

Share Improve this answer Follow answered May 29, 2016 at 12:52 dmx.techdmx.tech 1 Add a comment |

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged

• cisco
• port
• switch
• vlan
• trunk

.

• The Overflow Blog
• You should keep a developer’s journal
• The real 10x developer makes their whole team better
• Featured on Meta
• The December 2024 Community Asks Sprint has been moved to March 2025 (and...
• Stack Overflow Jobs is expanding to more countries

Related

27 Why do people tell me not to use VLANs for security? 30 What happens when a consumer switch receives a VLAN-tagged Ethernet frame? 2 multiple vlans routed on one nic? trunk?General? or Access? 1 VLAN trunking between Juniper EX -> Cisco Catalyst -> and Cisco Router 9 OpenWrt Configuring Tagged and Untagged VLAN on the Same Port 2 ESXI 5.1 - Unable to trunk to cisco switch 0 What if a device doesn't have TRUNK port? 0 Mikrotik Switch Trunk (Tag All) Port 0 Why do I need to configure a Trunk port?

Hot Network Questions

• Where did Tolstoy write that a man is like a fraction?
• Mixing between the tonic and dominant in melodic dictation
• Double factorial power series closed form expression
• Are these two circuits equivalent? How to prove it?
• Can we use "some" to replace "any" in "...and does not represent any Amazon employees despite any claims..."
• How to place a heavy bike on a workstand without lifting
• Space Shuttle HUD use outside of landing?
• How to make the curved part of this traffic light?
• What word(s) were used to identify the Van Dyke style of beard in the 17th century?
• Can the Turing barrier be behing the AI (neural) training wall and hence - there is no chance to break the AI wall?
• Visual aspect of an iron star
• Wonderful animations on a YouTube channel made with LaTeX
• Elementary consequence of non-abelian class field theory
• What does the verb advantage mean in this sentence from chapter one of "Wuthering Heights"?
• Which wire to ground to electrical box when pigtailing with wagos?
• Should a language have both null and undefined values?
• Why is the air pressure different between the inside and outside of my house?
• What is type of probability is involved when mathematicians say, eg, "The Collatz conjecture is probably true"?
• PSE Advent Calendar 2024 (Day 24): 'Twas the Meta before Christmas
• Do you lose the right of attribution if you're charged with a crime?
• Is there an MVP or "Hello world" for chess programming?
• Corporate space exploration/espionage
• When is Parker's first "I'm OK!" signal expected after it's close flyby of the Sun? Which dishes (if any) have been reserved for it?
• Can "having done" serve as a gerund?

more hot questions Question feed Subscribe to RSS Question feed

To subscribe to this RSS feed, copy and paste this URL into your RSS reader.