| Primary Purpose |
Connects end-user devices (PCs, printers, IP phones, cameras, etc.) |
Connects switches to other switches, routers, firewalls, or servers carrying multiple VLANs |
| VLAN Membership |
Belongs to a single VLAN only |
Usually carries multiple VLANs (configured as a trunk) |
| Frame Tagging |
Sends and receives untagged frames (no 802.1Q VLAN tag) |
Sends and receives tagged frames (802.1Q); may have a native (untagged) VLAN |
| 802.1Q Tagging |
Disabled (access ports do not add or expect tags) |
Enabled (tags added/removed as needed) |
| Typical Speed |
Often 1 Gbps (or matches device speed) |
Usually higher: 10G, 25G, 40G, 100G+ to avoid inter-switch bottlenecks |
| Common Use Case |
Workstation → wall jack → switch |
Switch-to-switch, switch-to-core router, switch-to-firewall |
| Default Mode (Cisco) |
Access mode by default |
Explicitly configured as trunk (or auto-negotiated) |
| Spanning Tree |
Typically an edge port (PortFast enabled) |
Usually a non-edge port (carries control traffic) |
| Example Configuration (Cisco) |
switchport mode access switchport access vlan 10 |
switchport mode trunk switchport trunk allowed vlan 10,20,30 |
| Visual Analogy |
Apartment door: one household (VLAN), packages arrive without labels |
Building elevator: carries many households (VLANs), each package has a floor label (tag) |
| Modern Notes |
- High-speed ports (SFP+, 10G/25G) are often labeled “uplink” in hardware, but may still be configurable as access ports.
- In small or flat networks with no VLANs, most ports behave like access ports.
- In VLAN-aware environments (enterprise, broadcast, SMPTE 2110), uplink ports are almost always trunks.
|
| In Short |
Single VLAN, untagged, end devices |
Multiple VLANs, tagged (trunk), inter-switch links |