Can someone please explain the difference between access ports and trunk ports on a switch? I'm starting to learn networking, and my understanding is that access ports are used to connect endpoints (e.g. computers and printers) to the switch and trunk ports are used to connect two switches together. Any help will be greatly appreciated. Thanks!

  • I worked on a network a while back and ALL switches are connected via Access Ports, not Trunk ports. Yes, I found this weird. However, their network passed traffic just fine. Everything worked. Why this was done? Beats me. – Wes Senter Aug 30 '18 at 22:19

An access port sends and receives untagged frames (i.e. all frames are in the same VLAN), while a trunk port supports tagged frames and thus allows to switch multiple VLANs.

  • 2
    And therefore, trunks can be used to connect endpoints that support VLAN tagging. And access points can be used to connect a single VLAN to dumb switches that don't. – David Schwartz May 4 '12 at 8:04
  • @Oliver - If a port has been configured as trunk port and an endpoint that does not support tags is connected, what are the implications and vice verse? – Motivated Oct 22 '19 at 3:34

For what it's worth, in my experience, both other answers (Oliver's and Ignacio V-A's) are correct, despite being different.

(Edit: I notice that Ignacio has since deleted his answer; the upshot of his answer was that trunk ports were higher-bandwidth-lower-latency ports on a switch, possibly better connected to the backplane, into which I read the suggestion that they were for inter-switch communication. I add this note only because, without it, my answer will make no sense to people without the rep. to see deleted answers.)

My old-time experience is that trunk ports are what Oliver says, that is, ports which will accept 802.1q VLAN-tagged packets, and switch them accordingly.

However, at least one switch I've used recently (the HP Pro Curve 1810G) uses "trunk port" to mean "a port which will be combined with one or more other ports for the purpose of a multiple-parallel-cable high-bandwidth link, usually to another switch"), as IVA does. Where trunk is used in this sense, the chassis may have dedicated trunk ports for inter-switch connection, and in at least some cases, these may have a preferential path through the backplane.

And yes, this overloading of the term "trunk" meant that it took me a whole day to set up an eight-port switch, when I was expecting the VLAN setup to take about 90 minutes. Why do you ask?

  • We're just talking terminology here. I think Cisco are the only ones who call a port that will carry multiple vlans, ie tagged frames a "Trunk". Most everybody else will call them "Tagged Ports". The original question is already answered previously. – user178183 Jun 18 '13 at 1:56
  • 2
    @NZalias Cisco is not "the only" company that uses this terminology, it's pretty common. Likely because Cisco is the dominant network device supplier. – voretaq7 Jun 18 '13 at 3:25
  • @MadHatter - If a port has been configured as trunk port and an endpoint that does not support tags is connected, what are the implications and vice verse? – Motivated Oct 26 '19 at 22:44
  • @Motivated in my experience, the traffic will not flow. But you might be better off asking this as a new question in its own right. – MadHatter Oct 27 '19 at 6:30

A Trunk is typically a link between 2 switches. though it can also be used between a switch and a router, and between a switch and a server. A Trunk, unlike an access port which is assigned to a single Vlan, can carry data from multiple VLANs. This means you can have let's say 4 VLANs on a switch, but do not have to connect a cable to the router [or another switch] for each VLAN, just one link for all the VLANs. Imagine if you had 100 VLANs on dozens of switches and you needed to route between them...a Trunk would allow you to aggregate them to a single Trunk link between each set of switches and a single Trunk to the router.


Trunk port is used to connect between switches and access port is used to connect to computers lap top printers etc, you cannnot extend the data from one switch to other switch access ports through trunk port. it can only extended through access port of switch.

  • 1
    -1 That makes very little sense, and what I can understand seems wrong. Sorry, but especially when posting to year-old Questions, we're looking for well thought out, complete, and accurate Answers. – Chris S Mar 20 '13 at 14:02
  • 1
    Your understanding is generally correct, but your reasoning is wrong. "Trunk Ports" (carrying multiple VLANs, with tagged traffic) are usually found used as inter-switch links, and "access ports" (usually carrying only one VLAN, untagged) are usually found going to end workstations, but this is by no means exclusive: You may have "trunk ports" (or "tagged ports") to end user desks, with a voice VLAN (usually tagged - for a VoIP phone) and a data VLAN (untagged, or "native" - for their workstation). – voretaq7 Jun 18 '13 at 3:29

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.