Tag Rule - TP-Link TL-SG3424 User Manual

3-10-4. Tag Rule

Function name:
Tag Rule
Function description:
In VLAN Tag Rule Setting, user can input VID number to each port. The range
of VID number is from 1 to 4094. User also can choose ingress filtering rules
to each port. There are two ingress filtering rules which can be applied to the
switch. The Ingress Filtering Rule 1 is "forward only packets with VID matching
this port's configured VID". The Ingress Filtering Rule 2 is "drop untagged
frame". You can also select the Role of each port as Access, Trunk, or Hybrid.
Parameter description:
Port 1-24:
Port number.
PVID:
This PVID range will be 1-4094. Before you set a number x as PVID, you
have to create a Tag-based VLAN with VID x. For example, if port x
receives an untagged packet, the switch will apply the PVID (assume as
VID y) of port x to tag this packet, the packet then will be forwarded as
the tagged packet with VID y.
Rule 1:
Forward only packets with VID matching this port's configured VID. You
can apply Rule 1 as a way to a given port to filter unwanted traffic. In
Rule 1, a given port checks if the given port is a member of the VLAN on
which the received packet belongs to, to determine forward it or not. For
example, if port 1 receives a tagged packet with VID=100 (VLAN
name=VLAN100), and if Rule 1 is enabled, the switch will check if port 1
is a member of VLAN100. If yes, the received packet is forwarded;
otherwise, the received packet is dropped.
Rule 2:
Drop untagged frame. You can configure a given port to accept all frames
(Tagged and Untagged) or just receive tagged frame. If the former is the
case, then the packets with tagged or untagged will be processed. If the
later is the case, only the packets carrying VLAN tag will be processed,
the rest packets will be discarded.
Note: If Rule 1 is enabled and port 1, for example, receives an untagged packet,
the switch will apply the PVID of port 1 to tag this packet, the packet then will
be forwarded. But if the PVID of port 1 is 100 and port 1 is not member of
VLAN 100, the packet will be dropped.
87
User Manual
Publication date: January, 2006
Revision A2
User Manual
Role:
This is an egress rule of the port. Here you can choose Access, Trunk or
Hybrid. Trunk means the outgoing packets must carry VLAN tag header.
Access means the outgoing packets carry no VLAN tag header. If
packets have double VLAN tags, one will be dropped and the other will
still be left. As to Hybrid, it is similar to Trunk, and both of them will tag-
out. When the port is set to Hybrid, its packets will be untagged out if the
VID of the outgoing packets with tag is the same as the one in the field of
Untag VID of this port.
Untag VID:
Valid range is 1~4094. It works only when Role is set to Hybrid.
Fig. 3-37
Publication date: January, 2006
Revision A2
88