Hands-On Lab: Configuring SVI Autostate Exclude

This hands-on lab configures SVI autostate exclude on a monitoring port within a VLAN, preventing that single inactive port from incorrectly bringing down the SVI for an entire VLAN that still has other active member ports.

SVI Autostate ExcludeSVI Up/Down BehaviorMonitoring Port Exception

~4 min read · Updated Sep 23, 2026

Lab Objective

Observe the default SVI autostate behavior where an SVI's state depends on having at least one active member port, add a SPAN destination (monitoring) port to a VLAN, and configure autostate exclude on it so its inactive link status no longer affects the SVI.

Lab Purpose

An SVI, discussed earlier in this series regarding inter-VLAN routing, normally goes down when no active port remains in its VLAN. A SPAN destination port, discussed earlier in this series regarding traffic mirroring, is often intentionally left disconnected until actively needed, and by default this single inactive port can incorrectly count against the VLAN's active port total, potentially bringing down an SVI that should otherwise remain fully functional.

Lab Topology

Switch1 (Layer 3 capable, VLAN 70)
  Gi1/0/5 ---- ServerA (active, VLAN 70)
  Gi1/0/10 ---- SPAN destination port
                (VLAN 70, currently
                disconnected/unused)

SVI: interface vlan 70, 192.168.70.1/24

Task 1: Configure the SVI and Verify Normal Operation

Configure interface VLAN 70 and confirm it is up while ServerA's port remains the only active member.

Task 2: Add the SPAN Destination Port to VLAN 70

Configure Gi1/0/10 as an access port in VLAN 70, intended for future SPAN monitoring use but currently disconnected.

Task 3: Observe the SVI Remains Unaffected While Other Ports Are Active

Confirm the SVI stays up, since ServerA's active port still counts.

Task 4: Simulate the Only Active Port Going Down

Shut down ServerA's port and observe the SVI going down as a result, since the disconnected SPAN port does not count as active.

Task 5: Configure Autostate Exclude and Verify SVI Stability

Restore ServerA's port, then configure autostate exclude on the SPAN destination port, and confirm the SVI's state now depends only on genuinely active data ports.

Solution and Verification

Switch1(config)# interface vlan 70
Switch1(config-if)# ip address 192.168.70.1 255.255.255.0
Switch1(config-if)# no shutdown

Switch1# show interfaces vlan 70 | include line protocol
Vlan70 is up, line protocol is up

Switch1(config)# interface gigabitethernet1/0/10
Switch1(config-if)# switchport mode access
Switch1(config-if)# switchport access vlan 70
-- Left physically disconnected, reserved
-- for future SPAN destination use

Switch1# show interfaces vlan 70 | include line protocol
Vlan70 is up, line protocol is up
-- Still up, since ServerA's port remains
-- active

Switch1(config)# interface gigabitethernet1/0/5
Switch1(config-if)# shutdown

Switch1# show interfaces vlan 70 | include line protocol
Vlan70 is up, line protocol is down
-- The SVI went down even though the SPAN
-- destination port "exists" in VLAN 70 --
-- a disconnected, unused port does not
-- count as active, so with ServerA also
-- down, zero active ports remain

Switch1(config)# interface gigabitethernet1/0/5
Switch1(config-if)# no shutdown

Switch1# show interfaces vlan 70 | include line protocol
Vlan70 is up, line protocol is up
-- Recovered once ServerA's port came
-- back up

Switch1(config)# interface gigabitethernet1/0/10
Switch1(config-if)# switchport autostate exclude

-- This port no longer participates in the
-- SVI's up/down calculation at all,
-- regardless of its own connection status

Switch1(config)# interface gigabitethernet1/0/5
Switch1(config-if)# shutdown

Switch1# show interfaces vlan 70 | include line protocol
Vlan70 is up, line protocol is down
-- The SVI still correctly reflects reality
-- (no genuinely active data ports remain),
-- but this demonstrates the SPAN port is
-- now excluded from the calculation entirely
-- rather than misleadingly contributing to it

Key Takeaway

By default, every access port assigned to a VLAN counts toward whether that VLAN's SVI is considered up, including monitoring ports intentionally left disconnected — switchport autostate exclude removes a specific port from this calculation, ensuring the SVI's state genuinely reflects whether real data-carrying ports are active, a detail worth configuring on any dedicated SPAN destination or similarly special-purpose port.

Written & researched by Dr. Shahin Siami

Related Articles

Hands-On Lab: Configuring HSRP for IPv6

This hands-on lab configures HSRP for IPv6 between two routers, demonstrating the option to use an automatically generated link-local virtual address rather than manually assigning one, and verifies failover behavior mirrors the IPv4 HSRP lab covered earlier in this series.

Continue

Hands-On Lab: Configuring Private VLANs (PVLANs)

This hands-on lab configures a full Private VLAN structure with a primary VLAN and both isolated and community secondary VLANs, demonstrating fine-grained Layer 2 isolation within a single IP subnet beyond what the simple protected-port feature from an earlier lab can achieve.

Continue

Hands-On Lab: Configuring VLAN Access Control Lists (VACLs)

This hands-on lab configures a VLAN Access Control List using a VLAN access-map to filter traffic within a single VLAN at Layer 2, something a standard router-applied ACL cannot achieve since traffic never leaves the VLAN to reach a routed interface.

Continue

Hands-On Lab: Configuring Storm Control

This hands-on lab configures storm control thresholds on a switch port to limit broadcast and multicast traffic, simulating a broadcast storm and verifying the switch suppresses excess traffic before it can overwhelm the network.

Continue

Hands-On Lab: Configuring PVLAN Edge (Protected Ports)

This hands-on lab configures PVLAN Edge (protected ports) on two access ports within the same VLAN, isolating them from each other at Layer 2 while both retain normal connectivity to an uplink port, demonstrating a lightweight isolation feature that requires no separate VLAN.

Continue

Hands-On Lab: Configuring Flex Links

This hands-on lab configures Flex Links between two uplinks on an access switch, providing sub-second failover without relying on Spanning Tree at all, and verifies traffic automatically shifts to the backup link when the primary fails.

Continue