set port ingress filter

set port ingress filter

Use this command to discard all frames received with a VLAN ID that don’t match the port’s VLAN egress list.

Syntax

set port ingress-filter port-string{disable enable}

Parameters

port‐string

Specifies the port(s) on which to enable of disable ingress filtering. For a

 

detailed description of possible port‐string values, refer to Port String

 

Syntax Used in the CLI” on page 7‐1.

 

 

disable enable

Disables or enables ingress filtering.

 

 

Defaults

None.

Mode

Switch command, read‐write.

Usage

When ingress filtering is enabled on a port, the VLAN IDs of incoming frames are compared to the port’s egress list. If the received VLAN ID does not match a VLAN ID on the port’s egress list, then the frame is dropped.

Ingress filtering is implemented according to the IEEE 802.1Q standard.

Example

This example shows how to enable port ingress filtering on ge.1.3:

C3(su)->set port ingress-filter ge.1.3 enable

show port discard

Use this command to display the frame discard mode for one or more ports. Ports can be set to discard frames based on whether or not the frame contains a VLAN tag. They can also be set to discard both tagged and untagged frames, or neither.

Syntax

show port discard [port-string]

Parameters

port‐string

(Optional) Displays the frame discard mode for specific port(s). For a

 

detailed description of possible port‐string values, refer to Port String

 

Syntax Used in the CLI” on page 7‐1.

 

 

Defaults

If port-stringis not specified, frame discard mode will be displayed for all ports.

SecureStack C3 Configuration Guide 10-11

Page 335
Image 335
Enterasys Networks 9034313-07 manual Set port ingress filter, Show port discard