802.1q + Vlan1
With 802.1q trunk vlan 1 always carry the control traffic, I change the native vlan `switchport trunk native vlan X` so now vlan 1 traffic is tagged. If you have `switchport trunk allowed vlan X` and dont include vlan 1 the control traffic still crosses the trunk, even though `sh int trunk` will show that vlan 1 is not included in the trunk. The output of `sh int trunk`, even though it dosent show it, implies vlan 1 is allowed since it cannot be removed or changed (and control traffic still passes).
Is this correct? Or am I missing something?
Is there anyway to debug this, seeing the actual vlans tagged crossing the trunk using just the switch not r/span’ning it to a host and sniffing?
























