User Guide

OmniAccess SafeGuard OS Administration Guide
138
Chapter 5: Setting Up SafeGuard Switches
Setting Frame Acceptance
To select the types of frames that can be received on a port, use the vlan acceptframe
command. Untagged or priority tagged frames are either discarded or accepted and
assigned the value of the VLAN ID for the interface.
With either option, VLAN tagged frames are forwarded in accordance with the IEEE
802.1Q VLAN specification. Use the no version of the command to set the frame
acceptance mode for all interfaces to accept or admit all. To select whether to accept or
reject the frame type, use the following syntax in Interface configuration mode:
vlan acceptframe [all | vlanonly]
no vlan acceptframe
In the following example, all priority frames are accepted on interface 0/18:
(SafeGuardOS) #configure terminal
(SafeGuardOS) (config) #interface 0/18
(SafeGuardOS) (interface 0/18) #vlan acceptframe all
(SafeGuardOS) (interface 0/18) #exit
(SafeGuardOS) (config) #exit
Use the show vlan name command as described in Showing a VLAN Name on page 149 or
the show vlan port command as described on Showing a VLAN Port on page 151 to verify
the configuration.
Enabling Ingress Filtering
When ingress filtering is disabled, frames received with VLAN IDs that do not match the
VLAN membership of the receiving interface are admitted and forwarded to ports that
are members of that VLAN.
By default, ingress filtering is enabled per port in SafeGuardOS.
Global Filtering
To enable ingress filtering for all interfaces, use the vlan port ingressfilter all command
in Global Configuration mode. The no version of the command disables ingress filtering
for all interfaces.
vlan port ingressfilter all
Syntax Description all
Specifies that untagged frames or priority
frames received on this interface are
accepted and assigned the value of the
interface VLAN ID for this port.
vlanonly
Specifies
that untagged frames or priority
frames received on this interface are
discarded.