VLAN C
OMMANDS
3-127switchport ingress-filtering
Use this command to enable ingress filtering for an interface. Use
the no form to restore the default.
Syntax
switchport ingress-filtering
no switchport ingress-filtering
Default Setting
Disabled
Command Mode
Interface Configuration (Ethernet, Port Channel)
Command Usage
• Ingress filtering only affects tagged frames.
• If ingress filtering is disabled, the interface will accept any
VLAN-tagged frame if the tag matches a VLAN known to the
switch (except for VLANs explicitly forbidden on this port).
• If ingress filtering is enabled, incoming fram es tagged for
VLANs which do not include this ingress port in their member
set will be discarded.
• Ingress filtering does not affect VLAN independent BPDU
frames, such as GVRP or STA. However, they do affect VLAN
dependent BPDU frames, such as GMRP.
Example
The following example shows how to set the interface to port 1
and then enable ingress filtering:
Console(config)#interface ethernet 1/1
Console(config-if)#switchport ingress-filtering
Console(config-if)#