VLAN Commands 4

If ingress filtering is enabled and a port receives frames tagged for VLANs for which it is not a member, these frames will be discarded.

Ingress filtering does not affect VLAN independent BPDU frames, such as GVRP or STA. However, they do affect VLAN dependent BPDU frames, such as GMRP.

Example

The following example shows how to set the interface to port 1 and then enable ingress filtering:

Console(config)#interface ethernet 1/1

Console(config-if)#switchport ingress-filtering

Console(config-if)#

switchport native vlan

This command configures the PVID (i.e., default VLAN ID) for a port. Use the no form to restore the default.

Syntax

switchport native vlan vlan-idno switchport native vlan

vlan-id- Default VLAN ID for a port. (Range: 1-4094, no leading zeroes)

Default Setting

VLAN 1

Command Mode

Interface Configuration (Ethernet Ports 1-8, Port Channel)

Command Usage

If an interface is not a member of VLAN 1 and you assign its PVID to this VLAN, the interface will automatically be added to VLAN 1 as an untagged member. For all other VLANs, an interface must first be configured as an untagged member before you can assign its PVID to that group.

If acceptable frame types is set to all or switchport mode is set to hybrid, the PVID will be inserted into all untagged frames entering the ingress port.

Example

The following example shows how to set the PVID for port 1 to VLAN 3:

Console(config)#interface ethernet 1/1

Console(config-if)#switchport native vlan 3

Console(config-if)#

4-173