VLAN COMMANDS

switchport ingress-filtering

Use this command to enable ingress filtering for an interface. Use the no form to restore the default.

Syntax

switchport ingress-filtering no switchport ingress-filtering

Default Setting

Disabled

Command Mode

Interface Configuration (Ethernet, Port Channel)

Command Usage

Ingress filtering only affects tagged frames.

If ingress filtering is disabled, the interface will accept any VLAN-tagged frame if the tag matches a VLAN known to the switch (except for VLANs explicitly forbidden on this port).

If ingress filtering is enabled, incoming frames tagged for VLANs which do not include this ingress port in their member set will be discarded.

Ingress filtering does not affect VLAN independent BPDU frames, such as GVRP or STA. However, they do affect VLAN dependent BPDU frames, such as GMRP.

Example

The following example shows how to set the interface to port 1 and then enable ingress filtering:

Console(config)#interface ethernet 1/1

Console(config-if)#switchport ingress-filtering

Console(config-if)#

3-127

Page 269
Image 269
SMC Networks 10/100 manual Switchport ingress-filtering, 127