Switchport Ingress-Filtering - Edge-Core ECS4120-28F Reference Manual

◆
Example
The following example shows how to add VLANs 1, 2, 5 and 6 to the allowed list as
tagged VLANs for port 1:
Console(config)#interface ethernet 1/1
Console(config-if)#switchport allowed vlan add 1,2,5,6 tagged
Console(config-if)#
switchport
This command enables ingress filtering for an interface. Use the no form to restore
ingress-filtering the default.
Syntax
Default Setting
Disabled
Command Mode
Interface Configuration (Ethernet, Port Channel)
Command Usage
◆
◆
◆
◆
Example
The following example shows how to set the interface to port 1 and then enable
ingress filtering:
Console(config)#interface ethernet 1/1
Console(config-if)#switchport ingress-filtering
Console(config-if)#
If a VLAN on the forbidden list for an interface is manually added to that
interface, the VLAN is automatically removed from the forbidden list for that
interface.
[no] switchport ingress-filtering
Ingress filtering only affects tagged frames.
If ingress filtering is disabled and a port receives frames tagged for VLANs for
which it is not a member, these frames will be flooded to all other ports (except
for those VLANs explicitly forbidden on this port).
If ingress filtering is enabled and a port receives frames tagged for VLANs for
which it is not a member, these frames will be discarded.
Ingress filtering does not affect VLAN independent BPDU frames, such as GVRP
or STA. However, they do affect VLAN dependent BPDU frames, such as GMRP.
– 567 –
Chapter 21
| VLAN Commands
Configuring VLAN Interfaces