switchport forbidden vlan
Use the switchport forbidden vlan command in Interface Configuration mode to forbid adding
specific VLANs to a port. To revert to allowing the addition of specific VLANs to the port, use
the remove parameter of this command.
Syntax
switchport forbidden vlan {add
vlan-list — List of valid VLAN IDs to add to the forbidden list. Separate nonconsecutive
•
add
VLAN IDs with a comma and no spaces. Use a hyphen to designate a range of IDs.
•
remove
nonconsecutive VLAN IDs with a comma and no spaces. Use a hyphen to designate a range of
IDs.
Default Configuration
All VLANs allowed.
Command Mode
Interface Configuration (Ethernet, port-channel) mode
User Guidelines
This command has no user guidelines.
Example
The following example forbids adding VLAN numbers 234 through 256 to port 1/g8.
console(config)#interface ethernet 1/g8
console(config-if-1/g8)#switchport forbidden vlan add 234-256
switchport general acceptable-frame-type tagged-only
Use the switchport general acceptable-frame-type tagged-only command in Interface
Configuration mode to discard untagged frames at ingress. To enable untagged frames at
ingress, use the no form of this command.
Syntax
switchport general acceptable-frame-type tagged-only
no switchport general acceptable-frame-type tagged-only
508
VLAN Commands
vlan-list
vlan-list — List of valid VLAN IDs to remove from the forbidden list. Separate
vlan-list
|remove
}