{"id":24206,"date":"2026-10-31T15:48:48","date_gmt":"2026-10-31T07:48:48","guid":{"rendered":"https:\/\/cciedump.spoto.net\/blog\/?p=24206"},"modified":"2026-10-31T15:48:49","modified_gmt":"2026-10-31T07:48:49","slug":"what-is-the-default-vlan-on-a-cisco-switch","status":"publish","type":"post","link":"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html","title":{"rendered":"What Is the Default VLAN on a Cisco Switch?"},"content":{"rendered":"<p>On any Cisco Catalyst or Nexus switch straight out of the box, the default VLAN is <strong>VLAN 1<\/strong>. From the moment you apply power to a factory-fresh switch, all physical Ethernet interfaces are active, unconfigured, and assigned as untagged access ports to this default broadcast domain.<\/p>\n<p>While VLAN 1 makes initial setup plug-and-play\u2014allowing devices connected to any port to communicate immediately without configuration\u2014relying on it in production introduces operational and security liabilities. Understanding how Cisco handles VLAN 1, how it differs from native and management VLANs, and how to safely migrate traffic away from it is an essential baseline for enterprise network administration.<\/p>\n<hr>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_17 counter-hierarchy counter-decimal ez-toc-light-blue\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><a class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" style=\"display: none;\"><i class=\"ez-toc-glyphicon ez-toc-icon-toggle\"><\/i><\/a><\/span><\/div>\n<nav><ul class=\"ez-toc-list ez-toc-list-level-1\"><li class=\"ez-toc-page-1 ez-toc-heading-level-2\"><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html\/#Cisco_Catalyst_Default_VLAN_Specifications_and_Architecture\" title=\"Cisco Catalyst Default VLAN Specifications and Architecture\">Cisco Catalyst Default VLAN Specifications and Architecture<\/a><ul class=\"ez-toc-list-level-3\"><li class=\"ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html\/#Core_Architectural_Specifications\" title=\"Core Architectural Specifications\">Core Architectural Specifications<\/a><\/li><\/ul><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-2\"><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html\/#Default_VLAN_vs_Native_VLAN_vs_Management_VLAN_Key_Differences\" title=\"Default VLAN vs. Native VLAN vs. Management VLAN: Key Differences\">Default VLAN vs. Native VLAN vs. Management VLAN: Key Differences<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-2\"><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html\/#How_to_Verify_Default_VLAN_Port_Assignments_in_Cisco_IOS\" title=\"How to Verify Default VLAN Port Assignments in Cisco IOS\">How to Verify Default VLAN Port Assignments in Cisco IOS<\/a><ul class=\"ez-toc-list-level-3\"><li class=\"ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html\/#Step_1_Check_Global_Port_Memberships\" title=\"Step 1: Check Global Port Memberships\">Step 1: Check Global Port Memberships<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html\/#Step_2_Inspect_Port_Operational_Status\" title=\"Step 2: Inspect Port Operational Status\">Step 2: Inspect Port Operational Status<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html\/#Step_3_Audit_Layer_2_Properties_on_a_Specific_Interface\" title=\"Step 3: Audit Layer 2 Properties on a Specific Interface\">Step 3: Audit Layer 2 Properties on a Specific Interface<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html\/#Step_4_Verify_Native_VLAN_ID_Across_Trunk_Links\" title=\"Step 4: Verify Native VLAN ID Across Trunk Links\">Step 4: Verify Native VLAN ID Across Trunk Links<\/a><\/li><\/ul><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-2\"><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html\/#Security_Vulnerabilities_of_VLAN_1_Why_Default_Assignments_Are_Risky\" title=\"Security Vulnerabilities of VLAN 1: Why Default Assignments Are Risky\">Security Vulnerabilities of VLAN 1: Why Default Assignments Are Risky<\/a><ul class=\"ez-toc-list-level-3\"><li class=\"ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html\/#Threat_1_VLAN_Hopping_via_Switch_Spoofing\" title=\"Threat 1: VLAN Hopping via Switch Spoofing\">Threat 1: VLAN Hopping via Switch Spoofing<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html\/#Threat_2_8021Q_Double-Tagging_Attacks\" title=\"Threat 2: 802.1Q Double-Tagging Attacks\">Threat 2: 802.1Q Double-Tagging Attacks<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html\/#Layer_2_Hardening_Principles\" title=\"Layer 2 Hardening Principles\">Layer 2 Hardening Principles<\/a><\/li><\/ul><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-2\"><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html\/#Frequently_Asked_Questions_Deleting_Renaming_or_Disabling_VLAN_1\" title=\"Frequently Asked Questions: Deleting, Renaming, or Disabling VLAN 1\">Frequently Asked Questions: Deleting, Renaming, or Disabling VLAN 1<\/a><ul class=\"ez-toc-list-level-3\"><li class=\"ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html\/#Can_you_delete_VLAN_1_from_a_Cisco_switch\" title=\"Can you delete VLAN 1 from a Cisco switch?\">Can you delete VLAN 1 from a Cisco switch?<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html\/#Can_you_rename_VLAN_1\" title=\"Can you rename VLAN 1?\">Can you rename VLAN 1?<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html\/#Can_you_administratively_shut_down_VLAN_1\" title=\"Can you administratively shut down VLAN 1?\">Can you administratively shut down VLAN 1?<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html\/#What_happens_to_control_plane_protocols_if_VLAN_1_is_pruned_from_a_trunk\" title=\"What happens to control plane protocols if VLAN 1 is pruned from a trunk?\">What happens to control plane protocols if VLAN 1 is pruned from a trunk?<\/a><\/li><\/ul><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-2\"><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html\/#Configuration_Guide_Reassigning_Switchports_and_Changing_the_Native_VLAN\" title=\"Configuration Guide: Reassigning Switchports and Changing the Native VLAN\">Configuration Guide: Reassigning Switchports and Changing the Native VLAN<\/a><ul class=\"ez-toc-list-level-3\"><li class=\"ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html\/#1_Create_Dedicated_Production_VLANs_and_Reassign_Access_Ports\" title=\"1. Create Dedicated Production VLANs and Reassign Access Ports\">1. Create Dedicated Production VLANs and Reassign Access Ports<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html\/#2_Configure_a_Non-Default_Native_VLAN_on_8021Q_Trunks\" title=\"2. Configure a Non-Default Native VLAN on 802.1Q Trunks\">2. Configure a Non-Default Native VLAN on 802.1Q Trunks<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-21\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html\/#3_Quarantine_and_Park_All_Unused_Switchports\" title=\"3. Quarantine and Park All Unused Switchports\">3. Quarantine and Park All Unused Switchports<\/a><\/li><\/ul><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-2\"><a class=\"ez-toc-link ez-toc-heading-22\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html\/#Conclusion\" title=\"Conclusion\">Conclusion<\/a><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"Cisco_Catalyst_Default_VLAN_Specifications_and_Architecture\"><\/span>Cisco Catalyst Default VLAN Specifications and Architecture<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>According to official Cisco Catalyst Software Configuration Guides for Cisco IOS and Cisco IOS-XE, VLAN 1 is hardcoded into switch firmware as the permanent administrative and operational default.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Core_Architectural_Specifications\"><\/span>Core Architectural Specifications<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<ul>\n<li><strong>Default VLAN ID:<\/strong> 1<\/li>\n<li><strong>Default VLAN Name:<\/strong> <code>default<\/code><\/li>\n<li><strong>VLAN Range Classification:<\/strong> Normal-range VLAN (VLAN IDs 1\u20131005). Normal-range definitions are stored in flash memory within the <code>vlan.dat<\/code> database file.<\/li>\n<li><strong>Factory Port Assignment:<\/strong> Every standard Ethernet interface (FastEthernet, GigabitEthernet, TenGigabitEthernet) belongs to VLAN 1 by default.<\/li>\n<li><strong>802.1Q Trunk Association:<\/strong> IEEE 802.1Q trunk encapsulation designates VLAN 1 as the default untagged native VLAN.<\/li>\n<li><strong>Control Plane Binding:<\/strong> Critical Cisco Layer 2 control protocols\u2014including Cisco Discovery Protocol (CDP), VLAN Trunking Protocol (VTP), Port Aggregation Protocol (PAgP), Dynamic Trunking Protocol (DTP), and Spanning Tree Protocol (STP)\u2014are architecturally tied to VLAN 1 for neighbor negotiation and topology maintenance.<\/li>\n<li><strong>Administrative Immutability:<\/strong> VLAN 1 cannot be deleted, cleared, or renamed. The entry <code>VLAN 0001<\/code> remains permanently registered in the switch&#8217;s internal Layer 2 forwarding table.<\/li>\n<\/ul>\n<hr>\n<h2><span class=\"ez-toc-section\" id=\"Default_VLAN_vs_Native_VLAN_vs_Management_VLAN_Key_Differences\"><\/span>Default VLAN vs. Native VLAN vs. Management VLAN: Key Differences<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>In casual conversation, engineers often use the terms &#8220;default VLAN,&#8221; &#8220;native VLAN,&#8221; and &#8220;management VLAN&#8221; interchangeably. In Cisco architectures, however, they represent three distinct Layer 2 concepts that happen to share the same ID (VLAN 1) in factory-default configurations.<\/p>\n<table>\n<thead>\n<tr>\n<th style=\"text-align: left;\">Criterion<\/th>\n<th style=\"text-align: left;\">Default VLAN (VLAN 1)<\/th>\n<th style=\"text-align: left;\">Native VLAN<\/th>\n<th style=\"text-align: left;\">Management VLAN<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td style=\"text-align: left;\"><strong>Primary Definition<\/strong><\/td>\n<td style=\"text-align: left;\">The out-of-the-box broadcast domain to which all switchports belong until reassigned.<\/td>\n<td style=\"text-align: left;\">The single VLAN on an IEEE 802.1Q trunk link whose frames carry no 802.1Q header tag.<\/td>\n<td style=\"text-align: left;\">The dedicated VLAN configured with a Switch Virtual Interface (SVI) for administrative access (SSH, SNMP, HTTPS).<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><strong>Default Assignment<\/strong><\/td>\n<td style=\"text-align: left;\">VLAN 1 (Hardcoded)<\/td>\n<td style=\"text-align: left;\">VLAN 1 (Default on all trunks)<\/td>\n<td style=\"text-align: left;\">VLAN 1 (via <code>interface Vlan 1<\/code>)<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><strong>802.1Q Tagging Behavior<\/strong><\/td>\n<td style=\"text-align: left;\">Tagged across trunks unless configured as the native VLAN.<\/td>\n<td style=\"text-align: left;\">Untagged across trunk links by default (can be tagged via explicit command).<\/td>\n<td style=\"text-align: left;\">Tagged across trunks like any standard data VLAN.<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><strong>Can It Be Changed?<\/strong><\/td>\n<td style=\"text-align: left;\">No. Ports can be moved, but VLAN 1 itself cannot be altered or removed.<\/td>\n<td style=\"text-align: left;\">Yes. Configurable per trunk interface via CLI.<\/td>\n<td style=\"text-align: left;\">Yes. Can be assigned to any custom VLAN ID (e.g., VLAN 10, VLAN 99).<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><strong>Can It Be Deleted?<\/strong><\/td>\n<td style=\"text-align: left;\">No. Protected by switch operating system.<\/td>\n<td style=\"text-align: left;\">Not applicable (it is a trunk property, not a distinct object).<\/td>\n<td style=\"text-align: left;\">Yes. The SVI or the underlying VLAN can be removed.<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\"><strong>Cisco Hardening Practice<\/strong><\/td>\n<td style=\"text-align: left;\">Prune and vacate; never carry production user or server traffic.<\/td>\n<td style=\"text-align: left;\">Change from VLAN 1 to an isolated, unused &#8220;dummy&#8221; VLAN ID on all trunks.<\/td>\n<td style=\"text-align: left;\">Move to a dedicated, out-of-band or non-routable administrative subnet.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<hr>\n<h2><span class=\"ez-toc-section\" id=\"How_to_Verify_Default_VLAN_Port_Assignments_in_Cisco_IOS\"><\/span>How to Verify Default VLAN Port Assignments in Cisco IOS<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Before restructuring your Layer 2 environment, inspect how your switch currently maps ports to VLAN 1. You can verify port membership and trunk behavior using four standard Cisco IOS commands.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Step_1_Check_Global_Port_Memberships\"><\/span>Step 1: Check Global Port Memberships<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Run <code>show vlan brief<\/code> to get an immediate summary of which interfaces reside in VLAN 1:<\/p>\n<pre><code class=\"language-text\">Switch# show vlan brief\n\nVLAN Name                             Status    Ports\n---- -------------------------------- --------- -------------------------------\n1    default                          active    Gi1\/0\/1, Gi1\/0\/2, Gi1\/0\/3, Gi1\/0\/4\n                                                Gi1\/0\/5, Gi1\/0\/6, Gi1\/0\/7, Gi1\/0\/8\n10   USERS                            active    \n20   VOICE                            active    \n<\/code><\/pre>\n<p>Interfaces listed alongside <code>1 default<\/code> are actively operating inside the default broadcast domain.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Step_2_Inspect_Port_Operational_Status\"><\/span>Step 2: Inspect Port Operational Status<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>To quickly check duplex, speed, and VLAN assignments across all interfaces simultaneously, execute:<\/p>\n<pre><code class=\"language-text\">Switch# show interfaces status\nPort      Name               Status       Vlan       Duplex  Speed Type\nGi1\/0\/1                      connected    1            a-full  a-1000 10\/100\/1000BaseTX\nGi1\/0\/2                      notconnect   1              auto    auto 10\/100\/1000BaseTX\nGi1\/0\/3                      connected    10           a-full  a-1000 10\/100\/1000BaseTX\nGi1\/0\/24                     connected    trunk        a-full  a-1000 10\/100\/1000BaseTX\n<\/code><\/pre>\n<h3><span class=\"ez-toc-section\" id=\"Step_3_Audit_Layer_2_Properties_on_a_Specific_Interface\"><\/span>Step 3: Audit Layer 2 Properties on a Specific Interface<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>To view detailed Layer 2 characteristics\u2014such as administrative mode, operational mode, and access VLAN assignment\u2014query the specific switchport:<\/p>\n<pre><code class=\"language-text\">Switch# show interfaces GigabitEthernet 1\/0\/1 switchport\nName: Gi1\/0\/1\nSwitchport: Enabled\nAdministrative Mode: dynamic auto\nOperational Mode: static access\nAdministrative Trunking Encapsulation: dot1q\nOperational Trunking Encapsulation: native\nNegotiation of Trunking: On\nAccess Mode VLAN: 1 (default)\nTrunking Native Mode VLAN: 1 (default)\n<\/code><\/pre>\n<h3><span class=\"ez-toc-section\" id=\"Step_4_Verify_Native_VLAN_ID_Across_Trunk_Links\"><\/span>Step 4: Verify Native VLAN ID Across Trunk Links<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>To determine if an active trunk is still using VLAN 1 as its untagged native channel, run:<\/p>\n<pre><code class=\"language-text\">Switch# show interfaces trunk\n\nPort        Mode             Encapsulation  Status        Native vlan\nGi1\/0\/24    on               802.1q         trunking      1\n\nPort        Vlans allowed on trunk\nGi1\/0\/24    1-4094\n\nPort        Vlans allowed and active in management domain\nGi1\/0\/24    1,10,20\n<\/code><\/pre>\n<p>If <code>Native vlan<\/code> displays <code>1<\/code>, untagged frames traverse that link on the default VLAN, signaling that the trunk needs hardening.<\/p>\n<hr>\n<h2><span class=\"ez-toc-section\" id=\"Security_Vulnerabilities_of_VLAN_1_Why_Default_Assignments_Are_Risky\"><\/span>Security Vulnerabilities of VLAN 1: Why Default Assignments Are Risky<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Leaving user endpoints, management services, and trunk native links assigned to VLAN 1 creates an expanded attack surface. Because VLAN 1 is universally predictable across all Cisco hardware, attackers leverage this default state for reconnaissance and Layer 2 exploitation.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Threat_1_VLAN_Hopping_via_Switch_Spoofing\"><\/span>Threat 1: VLAN Hopping via Switch Spoofing<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>By default, older Cisco switches set interfaces to <code>dynamic auto<\/code> or <code>dynamic desirable<\/code>. If an attacker connects a rogue device running software like Yersinia and sends Dynamic Trunking Protocol (DTP) packets, the switchport may negotiate an active 802.1Q trunk link. Once trunking is established, the attacker gains direct access to all VLANs permitted across that link.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Threat_2_8021Q_Double-Tagging_Attacks\"><\/span>Threat 2: 802.1Q Double-Tagging Attacks<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Double-tagging exploits how switches handle native VLAN headers:<br \/>\n1. An attacker connected to an access port on VLAN 1 crafts an Ethernet frame with two 802.1Q tags: an outer tag of VLAN 1 (the trunk&#8217;s native VLAN) and an inner tag of the target victim network (e.g., VLAN 50).<br \/>\n2. The first switch receives the frame, observes that the outer tag matches its trunk&#8217;s native VLAN (VLAN 1), strips the outer tag, and forwards the packet untagged across the trunk.<br \/>\n3. The downstream switch reads the remaining inner tag (VLAN 50) and forwards the packet into the target subnet without routing validation.<\/p>\n<p>While double-tagging is strictly unidirectional (the attacker cannot receive return packets directly), it allows blind packet injection, such as spoofed UDP or ICMP traffic, into restricted segments.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Layer_2_Hardening_Principles\"><\/span>Layer 2 Hardening Principles<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>To mitigate these exposures:<br \/>\n* Never assign end-user workstations, printers, or servers to VLAN 1.<br \/>\n* Move the administrative SVI (<code>interface Vlan<\/code>) to an isolated, non-default VLAN ID.<br \/>\n* Change the native VLAN on all 802.1Q trunks to an unused, non-routable ID.<br \/>\n* Disable unused switchports, assign them to an isolated quarantine VLAN, and shut them down administratively.<\/p>\n<hr>\n<h2><span class=\"ez-toc-section\" id=\"Frequently_Asked_Questions_Deleting_Renaming_or_Disabling_VLAN_1\"><\/span>Frequently Asked Questions: Deleting, Renaming, or Disabling VLAN 1<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<h3><span class=\"ez-toc-section\" id=\"Can_you_delete_VLAN_1_from_a_Cisco_switch\"><\/span>Can you delete VLAN 1 from a Cisco switch?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>No.<\/strong> If you enter global configuration mode and attempt to remove VLAN 1, the switch rejects the command immediately:<\/p>\n<pre><code class=\"language-text\">Switch(config)# no vlan 1\n% Default VLAN 1 may not be deleted.\n<\/code><\/pre>\n<p>VLAN 1 is hardcoded into Cisco IOS\/IOS-XE as a permanent system object and cannot be cleared from the VLAN database.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Can_you_rename_VLAN_1\"><\/span>Can you rename VLAN 1?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>No.<\/strong> Attempting to alter the administrative label assigned to VLAN 1 will result in an error:<\/p>\n<pre><code class=\"language-text\">Switch(config)# vlan 1\nSwitch(config-vlan)# name MANAGEMENT\n% Default VLAN 1 may not be renamed.\n<\/code><\/pre>\n<p>Its name will remain <code>default<\/code> for the lifespan of the operating system image.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Can_you_administratively_shut_down_VLAN_1\"><\/span>Can you administratively shut down VLAN 1?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>It depends on the context (Layer 2 vs. Layer 3):<\/strong><br \/>\n* <strong>Layer 3 Interface (SVI):<\/strong> You can safely shut down the management interface by running <code>shutdown<\/code> under <code>interface Vlan 1<\/code>. This disables Layer 3 IP reachability on that SVI without impacting Layer 2 switching.<br \/>\n* <strong>Layer 2 VLAN State:<\/strong> On modern Cisco Catalyst switches running IOS-XE, the CLI allows you to execute <code>shutdown<\/code> directly inside VLAN configuration mode (<code>vlan 1<\/code> -&gt; <code>shutdown<\/code>). This halts Layer 2 bridging for user payloads inside VLAN 1. However, doing so does not stop core internal control traffic.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"What_happens_to_control_plane_protocols_if_VLAN_1_is_pruned_from_a_trunk\"><\/span>What happens to control plane protocols if VLAN 1 is pruned from a trunk?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>If you manually prune VLAN 1 from an 802.1Q trunk using <code>switchport trunk allowed vlan remove 1<\/code>, <strong>Cisco control plane protocols do not break<\/strong>.<\/p>\n<p>Internal control frames\u2014such as CDP, VTP, DTP, and PAgP\u2014are handled by the switch&#8217;s internal backplane supervisor. The switch continues to transmit and process these control protocols across trunk links over VLAN 1 regardless of the trunk&#8217;s allowed VLAN list. Similarly, Per-VLAN Spanning Tree Plus (PVST+) continues sending BPDUs for other active VLANs undisturbed.<\/p>\n<hr>\n<h2><span class=\"ez-toc-section\" id=\"Configuration_Guide_Reassigning_Switchports_and_Changing_the_Native_VLAN\"><\/span>Configuration Guide: Reassigning Switchports and Changing the Native VLAN<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Follow this implementation template to transition access interfaces away from VLAN 1, reassign native trunking, and quarantine unallocated ports.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"1_Create_Dedicated_Production_VLANs_and_Reassign_Access_Ports\"><\/span>1. Create Dedicated Production VLANs and Reassign Access Ports<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<pre><code class=\"language-text\">! Step 1: Create production VLANs\nSwitch# configure terminal\nSwitch(config)# vlan 10\nSwitch(config-vlan)# name DATA_USERS\nSwitch(config-vlan)# exit\n\nSwitch(config)# vlan 20\nSwitch(config-vlan)# name VOICE\nSwitch(config-vlan)# exit\n\n! Step 2: Reassign user-facing access ports away from VLAN 1\nSwitch(config)# interface range GigabitEthernet 1\/0\/1 - 10\nSwitch(config-if-range)# description User Access Ports\nSwitch(config-if-range)# switchport mode access\nSwitch(config-if-range)# switchport access vlan 10\nSwitch(config-if-range)# switchport voice vlan 20\nSwitch(config-if-range)# switchport nonegotiate\nSwitch(config-if-range)# spanning-tree portfast\nSwitch(config-if-range)# spanning-tree bpduguard enable\nSwitch(config-if-range)# exit\n<\/code><\/pre>\n<h3><span class=\"ez-toc-section\" id=\"2_Configure_a_Non-Default_Native_VLAN_on_8021Q_Trunks\"><\/span>2. Configure a Non-Default Native VLAN on 802.1Q Trunks<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>To prevent double-tagging, designate an unused VLAN ID (e.g., VLAN 999) as a dedicated native VLAN across all interconnected switches.<\/p>\n<pre><code class=\"language-text\">! Step 1: Define an unused dummy VLAN for native traffic\nSwitch(config)# vlan 999\nSwitch(config-vlan)# name UNUSED_NATIVE\nSwitch(config-vlan)# state active\nSwitch(config-vlan)# exit\n\n! Step 2: Apply the new native VLAN to trunk uplinks\nSwitch(config)# interface GigabitEthernet 1\/0\/24\nSwitch(config-if)# description Uplink_to_Core\nSwitch(config-if)# switchport trunk encapsulation dot1q\nSwitch(config-if)# switchport mode trunk\nSwitch(config-if)# switchport trunk native vlan 999\nSwitch(config-if)# switchport trunk allowed vlan 10,20,999\nSwitch(config-if)# switchport nonegotiate\nSwitch(config-if)# exit\n\n! Optional hardening: Force the switch to tag the native VLAN globally\nSwitch(config)# vlan dot1q tag native\n<\/code><\/pre>\n<blockquote><p><strong>Note:<\/strong> The <code>switchport trunk native vlan<\/code> ID must match on both ends of the link. A mismatch triggers CDP native VLAN mismatch errors (<code>%CDP-4-NATIVE_VLAN_MISMATCH<\/code>) and can cause Spanning Tree to block the port to prevent loops.<\/p><\/blockquote>\n<h3><span class=\"ez-toc-section\" id=\"3_Quarantine_and_Park_All_Unused_Switchports\"><\/span>3. Quarantine and Park All Unused Switchports<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Unused interfaces should never remain active in VLAN 1. Move them to an unrouted, dead-end VLAN and disable them administratively:<\/p>\n<pre><code class=\"language-text\">! Step 1: Create an isolated parking lot VLAN\nSwitch(config)# vlan 666\nSwitch(config-vlan)# name PARKING_LOT\nSwitch(config-vlan)# exit\n\n! Step 2: Isolate and disable all idle ports\nSwitch(config)# interface range GigabitEthernet 1\/0\/11 - 23\nSwitch(config-if-range)# description Quarantined Unused Port\nSwitch(config-if-range)# switchport mode access\nSwitch(config-if-range)# switchport access vlan 666\nSwitch(config-if-range)# switchport nonegotiate\nSwitch(config-if-range)# shutdown\nSwitch(config-if-range)# end\n\nSwitch# copy running-config startup-config\n<\/code><\/pre>\n<hr>\n<h2><span class=\"ez-toc-section\" id=\"Conclusion\"><\/span>Conclusion<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>On a Cisco switch, the default VLAN is <strong>VLAN 1<\/strong>\u2014an immutable, factory-configured broadcast domain that hosts all interfaces upon first boot and carries fundamental Layer 2 control protocols. While Cisco IOS prevents you from deleting or renaming VLAN 1, network security best practices dictate that it should never carry standard end-user data, management access, or untagged trunk traffic. By provisioning dedicated data subnets, relocating management SVIs, altering trunk native VLANs to dedicated dummy IDs, and parking dormant ports, you eliminate the security risks of default configurations while maintaining normal switch control plane operations.<\/p>\n<div class='sfsi_Sicons' style='width: 100%; display: inline-block; vertical-align: middle; text-align:left'><div style='margin:0px 8px 0px 0px; line-height: 24px'><span>Please follow and like us:<\/span><\/div><div class='sfsi_socialwpr'><div class='sf_fb_share sf_icon' style='text-align:left;vertical-align: middle;'><a href='https:\/\/www.facebook.com\/sharer\/sharer.php?u=https%3A%2F%2Fcciedump.spoto.net%2Fblog%2Fwhat-is-the-default-vlan-on-a-cisco-switch_24206.html' style='display:inline-block;'  > <img class='sfsi_wicon'  data-pin-nopin='true' width='auto' height='auto' alt='fb-share-icon' title='Facebook Share' src='https:\/\/cciedump.spoto.net\/blog\/wp-content\/plugins\/ultimate-social-media-icons\/images\/visit_icons\/fbshare_bck.png'  \/><\/a><\/div><div class='sf_twiter sf_icon' style='display: inline-block;vertical-align: middle;width: auto;margin-left: 7px;'>\r\n\t\t\t\t\t\t<a target='_blank' href='https:\/\/twitter.com\/intent\/tweet?text=What+Is+the+Default+VLAN+on+a+Cisco+Switch%3F+https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html'style='display:inline-block' >\r\n\t\t\t\t\t\t\t<img data-pin-nopin= true width='auto' class='sfsi_wicon' src='https:\/\/cciedump.spoto.net\/blog\/wp-content\/plugins\/ultimate-social-media-icons\/images\/visit_icons\/en_US_Tweet.svg' alt='Tweet' title='Tweet' >\r\n\t\t\t\t\t\t<\/a>\r\n\t\t\t\t\t<\/div><div class='sf_pinit sf_icon' style='text-align:left;vertical-align: middle;float:left;line-height: 33px;width:auto;margin: 0 -2px;'><a href='#'  onclick='sfsi_pinterest_modal_images(event,\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html\",\"What Is the Default VLAN on a Cisco Switch?\")' style='display:inline-block;'  > <img class='sfsi_wicon'  data-pin-nopin='true' width='auto' height='auto' alt='fb-share-icon' title='Pin Share' src='https:\/\/cciedump.spoto.net\/blog\/wp-content\/plugins\/ultimate-social-media-icons\/images\/share_icons\/Pinterest_Save\/en_US_save.svg'  \/><\/a><\/div><\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>On any Cisco Catalyst or Nexus switch straight out of the box, the default VLAN is VLAN 1. From the moment you apply power to a factory-fresh switch, all physical Ethernet interfaces are active, unconfigured, and assigned as untagged access ports to this default broadcast domain. While VLAN 1 makes initial setup plug-and-play\u2014allowing devices connected&#8230; &raquo; <a class=\"read-more-link\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html\">read more<\/a><\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[3,608],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v18.0 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>What Is the Default VLAN on a Cisco Switch? - SPOTO Official Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What Is the Default VLAN on a Cisco Switch? - SPOTO Official Blog\" \/>\n<meta property=\"og:description\" content=\"On any Cisco Catalyst or Nexus switch straight out of the box, the default VLAN is VLAN 1. From the moment you apply power to a factory-fresh switch, all physical Ethernet interfaces are active, unconfigured, and assigned as untagged access ports to this default broadcast domain. While VLAN 1 makes initial setup plug-and-play\u2014allowing devices connected... &raquo; read more\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html\" \/>\n<meta property=\"og:site_name\" content=\"SPOTO Official Blog\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-31T07:48:48+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-31T07:48:49+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"SPOTO \u7f16\u8f91\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/cciedump.spoto.net\/blog\/#\/schema\/person\/25594d4796697ccb1ef63d55c269c638\",\"name\":\"SPOTO Club\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/cciedump.spoto.net\/blog\/#personlogo\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/cciedump.spoto.net\/blog\/wp-content\/uploads\/2020\/03\/spoto-facemask-96x96.jpg\",\"contentUrl\":\"https:\/\/cciedump.spoto.net\/blog\/wp-content\/uploads\/2020\/03\/spoto-facemask-96x96.jpg\",\"caption\":\"SPOTO Club\"},\"logo\":{\"@id\":\"https:\/\/cciedump.spoto.net\/blog\/#personlogo\"},\"description\":\"SPOTO is an excellent leader in IT certification training for 20+ years. We offer 100% real Cisco CCNA, CCNP exam dumps, CCIE Lab study materials, PMP, CISA, CISM, AWS, Palo Alto, and other IT exam dumps. We have helped thousands of candidates around the world to pass their IT exams on the first try! As the first-class online IT training organization in China, SPOTO cooperates with many giant Internet companies in China like Tencent, Baidu, and Alibaba. What\u2019s more, we have won lots of awards in IT education training such as \u201cTop Ten Influential Brands In Online Education Industry\u201d given by Baidu, \u201cOfficial IT Online Training Organization\u201d awarded by Tencent Class, etc. Join us: https:\/\/cciedump.spoto.net\/ Contact us: E-mail: support@spoto.net Phone \/ WhatsApp: +86 18344981205\",\"sameAs\":[\"https:\/\/cciedump.spoto.net\/\"]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cciedump.spoto.net\/blog\/#website\",\"url\":\"https:\/\/cciedump.spoto.net\/blog\/\",\"name\":\"SPOTO Official Blog\",\"description\":\"Focus on Online IT Training for 20+ Years\",\"publisher\":{\"@id\":\"https:\/\/cciedump.spoto.net\/blog\/#\/schema\/person\/25594d4796697ccb1ef63d55c269c638\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/cciedump.spoto.net\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html#webpage\",\"url\":\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html\",\"name\":\"What Is the Default VLAN on a Cisco Switch? - SPOTO Official Blog\",\"isPartOf\":{\"@id\":\"https:\/\/cciedump.spoto.net\/blog\/#website\"},\"datePublished\":\"2026-10-31T07:48:48+00:00\",\"dateModified\":\"2026-10-31T07:48:49+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/cciedump.spoto.net\/blog\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"What Is the Default VLAN on a Cisco Switch?\"}]},{\"@type\":\"Article\",\"@id\":\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html#article\",\"isPartOf\":{\"@id\":\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html#webpage\"},\"author\":{\"@id\":\"https:\/\/cciedump.spoto.net\/blog\/#\/schema\/person\/4edd6074d9632c14eda17a2205a88dd1\"},\"headline\":\"What Is the Default VLAN on a Cisco Switch?\",\"datePublished\":\"2026-10-31T07:48:48+00:00\",\"dateModified\":\"2026-10-31T07:48:49+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html#webpage\"},\"wordCount\":1407,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/cciedump.spoto.net\/blog\/#\/schema\/person\/25594d4796697ccb1ef63d55c269c638\"},\"articleSection\":[\"CCNA Certification\",\"Cisco Certification\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html#respond\"]}]},{\"@type\":\"Person\",\"@id\":\"https:\/\/cciedump.spoto.net\/blog\/#\/schema\/person\/4edd6074d9632c14eda17a2205a88dd1\",\"name\":\"SPOTO \u7f16\u8f91\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/cciedump.spoto.net\/blog\/#personlogo\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/cciedump.spoto.net\/blog\/wp-content\/litespeed\/avatar\/f525ded90e4ff384a19ebdbe47c80d22.jpg?ver=1793350507\",\"contentUrl\":\"https:\/\/cciedump.spoto.net\/blog\/wp-content\/litespeed\/avatar\/f525ded90e4ff384a19ebdbe47c80d22.jpg?ver=1793350507\",\"caption\":\"SPOTO \u7f16\u8f91\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"What Is the Default VLAN on a Cisco Switch? - SPOTO Official Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html","og_locale":"en_US","og_type":"article","og_title":"What Is the Default VLAN on a Cisco Switch? - SPOTO Official Blog","og_description":"On any Cisco Catalyst or Nexus switch straight out of the box, the default VLAN is VLAN 1. From the moment you apply power to a factory-fresh switch, all physical Ethernet interfaces are active, unconfigured, and assigned as untagged access ports to this default broadcast domain. While VLAN 1 makes initial setup plug-and-play\u2014allowing devices connected... &raquo; read more","og_url":"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html","og_site_name":"SPOTO Official Blog","article_published_time":"2026-10-31T07:48:48+00:00","article_modified_time":"2026-10-31T07:48:49+00:00","twitter_card":"summary_large_image","twitter_misc":{"Written by":"SPOTO \u7f16\u8f91","Est. reading time":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Person","Organization"],"@id":"https:\/\/cciedump.spoto.net\/blog\/#\/schema\/person\/25594d4796697ccb1ef63d55c269c638","name":"SPOTO Club","image":{"@type":"ImageObject","@id":"https:\/\/cciedump.spoto.net\/blog\/#personlogo","inLanguage":"en-US","url":"https:\/\/cciedump.spoto.net\/blog\/wp-content\/uploads\/2020\/03\/spoto-facemask-96x96.jpg","contentUrl":"https:\/\/cciedump.spoto.net\/blog\/wp-content\/uploads\/2020\/03\/spoto-facemask-96x96.jpg","caption":"SPOTO Club"},"logo":{"@id":"https:\/\/cciedump.spoto.net\/blog\/#personlogo"},"description":"SPOTO is an excellent leader in IT certification training for 20+ years. We offer 100% real Cisco CCNA, CCNP exam dumps, CCIE Lab study materials, PMP, CISA, CISM, AWS, Palo Alto, and other IT exam dumps. We have helped thousands of candidates around the world to pass their IT exams on the first try! As the first-class online IT training organization in China, SPOTO cooperates with many giant Internet companies in China like Tencent, Baidu, and Alibaba. What\u2019s more, we have won lots of awards in IT education training such as \u201cTop Ten Influential Brands In Online Education Industry\u201d given by Baidu, \u201cOfficial IT Online Training Organization\u201d awarded by Tencent Class, etc. Join us: https:\/\/cciedump.spoto.net\/ Contact us: E-mail: support@spoto.net Phone \/ WhatsApp: +86 18344981205","sameAs":["https:\/\/cciedump.spoto.net\/"]},{"@type":"WebSite","@id":"https:\/\/cciedump.spoto.net\/blog\/#website","url":"https:\/\/cciedump.spoto.net\/blog\/","name":"SPOTO Official Blog","description":"Focus on Online IT Training for 20+ Years","publisher":{"@id":"https:\/\/cciedump.spoto.net\/blog\/#\/schema\/person\/25594d4796697ccb1ef63d55c269c638"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cciedump.spoto.net\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html#webpage","url":"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html","name":"What Is the Default VLAN on a Cisco Switch? - SPOTO Official Blog","isPartOf":{"@id":"https:\/\/cciedump.spoto.net\/blog\/#website"},"datePublished":"2026-10-31T07:48:48+00:00","dateModified":"2026-10-31T07:48:49+00:00","breadcrumb":{"@id":"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cciedump.spoto.net\/blog"},{"@type":"ListItem","position":2,"name":"What Is the Default VLAN on a Cisco Switch?"}]},{"@type":"Article","@id":"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html#article","isPartOf":{"@id":"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html#webpage"},"author":{"@id":"https:\/\/cciedump.spoto.net\/blog\/#\/schema\/person\/4edd6074d9632c14eda17a2205a88dd1"},"headline":"What Is the Default VLAN on a Cisco Switch?","datePublished":"2026-10-31T07:48:48+00:00","dateModified":"2026-10-31T07:48:49+00:00","mainEntityOfPage":{"@id":"https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html#webpage"},"wordCount":1407,"commentCount":0,"publisher":{"@id":"https:\/\/cciedump.spoto.net\/blog\/#\/schema\/person\/25594d4796697ccb1ef63d55c269c638"},"articleSection":["CCNA Certification","Cisco Certification"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/cciedump.spoto.net\/blog\/what-is-the-default-vlan-on-a-cisco-switch_24206.html#respond"]}]},{"@type":"Person","@id":"https:\/\/cciedump.spoto.net\/blog\/#\/schema\/person\/4edd6074d9632c14eda17a2205a88dd1","name":"SPOTO \u7f16\u8f91","image":{"@type":"ImageObject","@id":"https:\/\/cciedump.spoto.net\/blog\/#personlogo","inLanguage":"en-US","url":"https:\/\/cciedump.spoto.net\/blog\/wp-content\/litespeed\/avatar\/f525ded90e4ff384a19ebdbe47c80d22.jpg?ver=1793350507","contentUrl":"https:\/\/cciedump.spoto.net\/blog\/wp-content\/litespeed\/avatar\/f525ded90e4ff384a19ebdbe47c80d22.jpg?ver=1793350507","caption":"SPOTO \u7f16\u8f91"}}]}},"_links":{"self":[{"href":"https:\/\/cciedump.spoto.net\/blog\/wp-json\/wp\/v2\/posts\/24206"}],"collection":[{"href":"https:\/\/cciedump.spoto.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cciedump.spoto.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cciedump.spoto.net\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cciedump.spoto.net\/blog\/wp-json\/wp\/v2\/comments?post=24206"}],"version-history":[{"count":1,"href":"https:\/\/cciedump.spoto.net\/blog\/wp-json\/wp\/v2\/posts\/24206\/revisions"}],"predecessor-version":[{"id":24216,"href":"https:\/\/cciedump.spoto.net\/blog\/wp-json\/wp\/v2\/posts\/24206\/revisions\/24216"}],"wp:attachment":[{"href":"https:\/\/cciedump.spoto.net\/blog\/wp-json\/wp\/v2\/media?parent=24206"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cciedump.spoto.net\/blog\/wp-json\/wp\/v2\/categories?post=24206"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cciedump.spoto.net\/blog\/wp-json\/wp\/v2\/tags?post=24206"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}