200-101 · Question #200
Refer to the exhibit. A frame on VLAN 1 on switch S1 is sent to switch S2 where the frame is received on VLAN 2. What causes this behavior?
The correct answer is C. native VLAN mismatches. A native VLAN mismatch is the cause. On an 802.1Q trunk link, frames belonging to the native VLAN are sent untagged. If S1 has its native VLAN set to VLAN 1 and S2 has its native VLAN set to VLAN 2, then frames sent untagged by S1 (as VLAN 1 traffic) will be received and processe
Question
Options
- Atrunk-mode mismatches
- Ballowing only VLAN 2 on the destination
- Cnative VLAN mismatches
- DVLANs that do not correspond to a unique IP subnet
How the community answered
(22 responses)- A14% (3)
- B5% (1)
- C73% (16)
- D9% (2)
Explanation
A native VLAN mismatch is the cause. On an 802.1Q trunk link, frames belonging to the native VLAN are sent untagged. If S1 has its native VLAN set to VLAN 1 and S2 has its native VLAN set to VLAN 2, then frames sent untagged by S1 (as VLAN 1 traffic) will be received and processed by S2 as VLAN 2 traffic-because S2 assigns all untagged frames to its own native VLAN (2). This cross-VLAN frame delivery without intentional routing is the classic symptom of a native VLAN mismatch. This is a security concern and can be exploited for VLAN hopping attacks. Cisco recommends setting the native VLAN to an unused VLAN to avoid this issue.
Topics
Community Discussion
No community discussion yet for this question.