Ports - Cisco WLC 5700 Series Interface Configuration Manual

Ports

Add ports to a VLAN by using the switchport interface configuration commands:
• Identify the interface.
• For a trunk port, set trunk characteristics, and, if desired, define the VLANs to which it can belong.
• For an access port, set and define the VLAN to which it belongs.
Ports
ports are Layer 2-only interfaces associated with a physical port. ports belong to one or more VLANs. A
controller port can be an access port, a trunk port, or a tunnel port. You can configure a port as an access port
or trunk port or let the Dynamic Trunking Protocol (DTP) operate on a per-port basis to set the switchport
mode by negotiating with the port on the other end of the link. You must manually configure tunnel ports as
part of an asymmetric link connected to an IEEE 802.1Q trunk port. ports are used for managing the physical
interface and associated Layer 2 protocols and do not handle routing or bridging.
Configure controller ports by using the switchport interface configuration commands. Use the switchport
command with no keywords to put an interface that is in Layer 3 mode into Layer 2 mode.
Access Ports
An access port belongs to and carries the traffic of only one VLAN (unless it is configured as a voice VLAN
port). Traffic is received and sent in native formats with no VLAN tagging. Traffic arriving on an access port
is assumed to belong to the VLAN assigned to the port. If an access port receives a tagged packet (Inter-Switch
Link [ISL] or IEEE 802.1Q tagged), the packet is dropped, and the source address is not learned.
Two types of access ports are supported:
• Static access ports are manually assigned to a VLAN (or through a RADIUS server for use with IEEE
• VLAN membership of dynamic access ports is learned through incoming packets. By default, a dynamic
You can also configure an access port with an attached Cisco IP Phone to use one VLAN for voice traffic and
another VLAN for data traffic from a device attached to the phone.
Trunk Ports
A trunk port carries the traffic of multiple VLANs and by default is a member of all VLANs in the VLAN
database.
Although by default, a trunk port is a member of every VLAN known to the VTP, you can limit VLAN
membership by configuring an allowed list of VLANs for each trunk port. The list of allowed VLANs does
not affect any other port but the associated trunk port. By default, all possible VLANs (VLAN ID 1 to 4094)
are in the allowed list. A trunk port can become a member of a VLAN only if VTP knows of the VLAN and
if the VLAN is in the enabled state. If VTP learns of a new, enabled VLAN and the VLAN is in the allowed
Interface Configuration Guide, Cisco IOS XE Release 3E (Cisco WLC 5700 Series)
24
802.1x.
access port is not a member of any VLAN, and forwarding to and from the port is enabled only when
the VLAN membership of the port is discovered. Dynamic access ports on the controller are assigned
to a VLAN by a VLAN Membership Policy Server (VMPS). The VMPS can be a Catalyst 6500 series
switch; the controller cannot be a VMPS server.
Configuring Interfaces
OL-32314-01