Cisco ME 3400 Command Reference Manual page 643

Chapter 2 Cisco ME 3400 Ethernet Access Switch Cisco IOS Commands
Any IEEE 802.1Q encapsulated IP packets received on a tunnel port can be filtered by MAC access
control lists (ACLs), but not by IP ACLs. This is because the switch does not recognize the protocol
inside the IEEE 802.1Q header. This restriction applies to router ACLs, port ACLs, and VLAN maps.
Configuring a port as an 802.1Q tunnel port has these limitations:
•
•
•
•
For more information about configuring IEEE 802.1Q tunnel ports, see the software configuration guide
Note
for this release.
The IEEE 802.1x feature interacts with switchport modes in these ways:
•
•
Examples This example shows how to configure a port for access mode:
Switch(config)# interface gigabitethernet0/1
Switch(config-if)# switchport mode access
This example shows how to configure a port for trunk mode:
Switch(config)# interface gigabitethernet0/1
Switch(config-if)# switchport mode trunk
This example shows how to configure a port as an IEEE 802.1Q tunnel port:
Switch(config)# interface gigabitethernet0/1
Switch(config-if)# switchport mode dot1q-tunnel
You can verify your settings by entering the show interfaces interface-id switchport privileged EXEC
command and examining information in the Administrative Mode and Operational Mode rows.
OL-9640-07
IP routing is not supported on tunnel ports.
Tunnel ports do not support IP ACLs.
If an IP ACL is applied to a trunk port in a VLAN that includes tunnel ports, or if a VLAN map is
applied to a VLAN that includes tunnel ports, packets received from the tunnel port are treated as
non-IP packets and are filtered with MAC access lists.
Layer 3 quality of service (QoS) ACLs and other QoS features related to Layer 3 information are
not supported on tunnel ports.
If you try to enable IEEE 802.1x on a trunk port, an error message appears, and IEEE 802.1x is not
enabled. If you try to change the mode of an IEEE 802.1x-enabled port to trunk, the port mode is
not changed.
If you try to enable IEEE 802.1x on a dynamic-access (VLAN Query Protocol [VQP]) port, an error
message appears, and IEEE 802.1x is not enabled. If you try to change an IEEE 802.1x-enabled port
to dynamic VLAN assignment, an error message appears, and the VLAN configuration is not
changed.
Note Only user network interfaces (UNIs) or enhanced network interfaces (ENIs) can be
dynamic-access ports.
Cisco ME 3400 Ethernet Access Switch Command Reference
switchport mode
2-617