Question 609 of 1,819
Switching and Network AccessmediumVerificationObjective-mapped

Quick Answer

The answer is to enable IP routing on the multilayer switch with the global configuration command 'ip routing'. A multilayer switch, by default, operates as a Layer 2 device, meaning its switched virtual interfaces (SVIs) can only route traffic within the same VLAN. Without the 'ip routing' command, the switch cannot forward packets between VLANs, even if the SVIs are correctly configured with IP addresses and are in an up/up state. On the CCNA 200-301 v2 exam, this scenario tests your understanding of the fundamental difference between a Layer 2 switch and a multilayer switch; a common trap is to assume that creating SVIs alone enables inter-VLAN routing. Remember that the 'ip routing' command is the critical toggle that activates the switch’s routing engine. A simple memory tip: "No IP routing, no inter-VLAN routing—SVIs are just gateways without a route."

CCNA Switching and Network Access Practice Question

This 200-301 practice question tests your understanding of switching and network access. The scenario asks you to isolate a root cause — eliminate options that address a different problem before choosing. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.

You are connected to SW1 via the console. SW1 is a multilayer switch with SVIs for VLANs 10 (192.168.10.1/24) and 20 (192.168.20.1/24). Hosts in VLAN 10 can ping their default gateway (192.168.10.1), but cannot ping hosts in VLAN 20. You suspect IP routing is not enabled or the SVIs are not up.

Question 1mediumVerification
Open the full VLAN trunking answer →

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Enable IP routing on SW1 with the 'ip routing' global configuration command.

A multilayer switch requires 'ip routing' to forward packets between VLANs. Without it, the switch acts as a Layer 2 device. Enabling IP routing allows the SVIs to route traffic between VLANs. The verification commands confirm routing is active and SVIs are operational.

Key principle: A trunk being up does not mean the VLAN is allowed across it. Always verify the allowed VLAN list and whether the VLAN exists on both switches.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Enable IP routing on SW1 with the 'ip routing' global configuration command.

    Why this is correct

    A multilayer switch requires the 'ip routing' command to enable Layer 3 forwarding between VLANs. Without it, the SVIs can only act as default gateways for their respective VLANs but cannot route packets between them.

    Related concept

    Access ports place end devices into a single VLAN.

  • Configure a trunk port between SW1 and an external router, then enable routing on the router.

    Why it's wrong here

    This describes router-on-a-stick, which is used when the switch is Layer 2 only. However, SW1 is a multilayer switch capable of routing internally; adding an external router is unnecessary and does not address the missing 'ip routing' command.

  • Ensure the SVIs are not shut down and have the 'no shutdown' command applied.

    Why it's wrong here

    While SVIs must be administratively up, the question states that hosts can ping their default gateway (the SVI), so the SVIs are already operational. The issue is the lack of IP routing, not the SVI interface state.

  • Add a static route on SW1 pointing to the VLAN 20 subnet via the VLAN 10 SVI.

    Why it's wrong here

    A static route is unnecessary because the SVI for VLAN 20 is directly connected. The switch already has a connected route for VLAN 20. The real issue is that IP routing is disabled, so the switch does not forward between directly connected networks.

Option-by-option analysis

Why each answer is right or wrong

Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.

Enable IP routing on SW1 with the 'ip routing' global configuration command.Correct answer

Why this is correct

A multilayer switch requires the 'ip routing' command to enable Layer 3 forwarding between VLANs. Without it, the SVIs can only act as default gateways for their respective VLANs but cannot route packets between them.

Configure a trunk port between SW1 and an external router, then enable routing on the router.Wrong answer — click to see why

Why this is wrong here

The specific factual error is that the question states SW1 is a multilayer switch with SVIs, so it can route internally without an external router. The issue is that IP routing is not enabled on the switch itself.

Why candidates choose this

Candidates might confuse the need for inter-VLAN routing with the router-on-a-stick method, especially if they are more familiar with Layer 2 switches.

Ensure the SVIs are not shut down and have the 'no shutdown' command applied.Wrong answer — click to see why

Why this is wrong here

The specific factual error is that the SVIs are already up (hosts can ping the gateway), so 'no shutdown' is not the missing step. The problem is at Layer 3 routing, not Layer 2/3 interface status.

Why candidates choose this

Candidates often check interface status first when troubleshooting connectivity, so they might assume the SVIs are down even though the hosts can reach the gateway.

Add a static route on SW1 pointing to the VLAN 20 subnet via the VLAN 10 SVI.Wrong answer — click to see why

Why this is wrong here

The specific factual error is that directly connected networks do not require static routes; the switch automatically installs them when the SVI is up. The problem is that 'ip routing' is not enabled, so the switch does not use these routes for forwarding.

Why candidates choose this

Candidates might think that inter-VLAN routing requires explicit static routes, not realizing that a multilayer switch with SVIs automatically has connected routes and only needs 'ip routing' enabled.

Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”

Common exam traps

Common exam trap: an active trunk can still block the VLAN you need

A trunk being up does not prove every VLAN is crossing it. Check allowed VLAN lists, native VLAN mismatch, VLAN existence and access-port assignment.

Trap categories for this question

  • Command / output trap

    This describes router-on-a-stick, which is used when the switch is Layer 2 only. However, SW1 is a multilayer switch capable of routing internally; adding an external router is unnecessary and does not address the missing 'ip routing' command.

Detailed technical explanation

How to think about this question

VLAN questions usually combine access-port and trunking clues. The key is to identify whether the issue is local to one switchport, caused by the trunk, or caused by the VLAN not existing where it needs to exist.

KKey Concepts to Remember

  • Access ports place end devices into a single VLAN.
  • Trunk ports carry multiple VLANs between switches.
  • Allowed VLAN lists decide which VLANs can cross a trunk.
  • Native VLAN mismatch can create confusing symptoms.

TExam Day Tips

  • Use show vlan brief to verify access VLANs.
  • Use show interfaces trunk to verify trunk state and allowed VLANs.
  • Do not treat every same-VLAN issue as a routing problem.

Key takeaway

A trunk being up does not mean the VLAN is allowed across it. Always verify the allowed VLAN list and whether the VLAN exists on both switches.

Real-world example

How this comes up in practice

A help-desk technician troubleshoots why a newly connected PC cannot reach shared printers on the same floor. The cable is good, the switch port is active, but the PC is in VLAN 20 and the printers are in VLAN 10. The uplink trunk only allows VLAN 10. A trunk being up does not mean every VLAN crosses it.

What to study next

Got this wrong? Here's your next step.

Review VLAN allowed lists, native VLAN mismatch detection, and how to verify VLAN membership with show vlan brief and show interfaces trunk. Then practise related 200-301 questions on switching, trunking, and access-port configuration.

Related practice questions

Related 200-301 practice-question pages

Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.

Practice this exam

Start a free 200-301 practice session

Short sessions build daily habit. Longer sessions build exam-day stamina. Try a timed session to simulate real conditions.

FAQ

Questions learners often ask

What does this 200-301 question test?

Switching and Network Access — This question tests Switching and Network Access — Access ports place end devices into a single VLAN..

What is the correct answer to this question?

The correct answer is: Enable IP routing on SW1 with the 'ip routing' global configuration command. — A multilayer switch requires 'ip routing' to forward packets between VLANs. Without it, the switch acts as a Layer 2 device. Enabling IP routing allows the SVIs to route traffic between VLANs. The verification commands confirm routing is active and SVIs are operational.

What should I do if I get this 200-301 question wrong?

Review VLAN allowed lists, native VLAN mismatch detection, and how to verify VLAN membership with show vlan brief and show interfaces trunk. Then practise related 200-301 questions on switching, trunking, and access-port configuration.

What is the key concept behind this question?

Access ports place end devices into a single VLAN.

About these practice questions

Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Last reviewed: Jun 7, 2026

Question Discussion

Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.

Loading comments…

Sign in to join the discussion.

This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.