Switch Port Access Mode

Switchport mode access configures a switch port to operate as an access port, carrying traffic for a single VLAN and connecting end devices like computers or printers.Overview

A switch port in access mode is designed to connect end devices rather than other switches. It carries traffic for only one VLAN, stripping any VLAN tags from incoming frames and discarding frames tagged with a different VLAN ID . This ensures that devices connected to the port are part of a single broadcast domain, improving network performance and security .

Key Characteristics

• Single VLAN assignment: The port can only belong to one VLAN, which is set using switchport access vlan .
• No VLAN tagging: Outgoing frames are untagged, and incoming frames with tags not matching the access VLAN are dropped .
• End device connection: Typically used for PCs, printers, IP phones, or servers that do not need VLAN awareness .
• Cannot be trunk: A port cannot simultaneously be configured as both access and trunk; the last command executed takes effect .

Configuration Example

To configure a Cisco switch port as an access port for VLAN 10:

Switch> enableSwitch# configure terminalSwitch(config)# interface FastEthernet0/2Switch(config-if)# switchport mode accessSwitch(config-if)# switchport access vlan 10Switch(config-if)# exitSwitch(config)# end

This sets the interface to access mode and assigns it to VLAN 10 .

Verification

To verify the configuration of a switch port in access mode:

• Use show running-config to view the active configuration for the interface.
• Use show interfaces switchport to see the port mode and assigned VLAN .

Best Practices

• Use switchport host for end devices to automatically configure the port as access mode, enable STP PortFast, and disable EtherChannel .
• Ensure only end devices are connected to access ports to avoid spanning-tree or VLAN issues.
• Combine switchport mode access with switchport access vlan for proper VLAN assignment. By configuring ports in access mode, network administrators can control VLAN membership, enhance security, and simplify network management for end devices .