thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Commonly confused · Routing & Switching

Access Port vs Trunk Port: What's the Difference?

An access port belongs to a single data VLAN and sends untagged frames, typically to end devices. A trunk port carries traffic for multiple VLANs between switches, routers, or hypervisors by adding 802.1Q tags.

Access Port

Full definition
vs

Trunk Port

Full definition
Access PortTrunk Port
VLANs carriedOne data VLAN (plus optional voice VLAN)Many VLANs
TaggingUntagged802.1Q tagged, except the native VLAN
Connects toPCs, printers, phonesSwitches, routers (router-on-a-stick), hypervisors, APs
Cisco commandswitchport mode accessswitchport mode trunk
Native VLANNot applicableUntagged traffic; must match on both ends
HardeningDisable DTP; enable PortFast and BPDU GuardPrune unneeded VLANs; change native VLAN from 1
Remember it

Access is a single-lane road to a host; a trunk is a multilane highway with labeled lanes.

Exam tip

Watch for native VLAN mismatch troubleshooting and VLAN hopping questions. Know that a voice VLAN on an access port is still an access port, not a trunk.

Tested on

More Routing & Switching look-alikes