User Guide

OmniAccess SafeGuard OS Administration Guide
139
Chapter 5: Setting Up SafeGuard Switches
no vlan port ingressfilter all
The commands have no parameters or variables.
In the following example, ingress filtering is enabled:
(SafeGuardOS) #configure terminal
(SafeGuardOS) (config) #vlan port ingressfilter all
(SafeGuardOS) (config) #exit
Per-Interface Filtering
To enable ingress filtering for a specific interface, use the vlan port ingressfilter
command in Interface Configuration mode. The no version of the command disables
ingress filtering for the interface.
vlan ingressfilter
no vlan ingressfilter
These commands have no parameters or variables.
In the following example, ingress filtering is enabled on port 0/12:
(SafeGuardOS) #configure terminal
(SafeGuardOS) (config) #interface 0/12
(SafeGuardOS) (interface 0/12) #vlan ingressfilter
(SafeGuardOS) (interface 0/12) #exit
(SafeGuardOS) (config) #exit
Verifying the Configurations
Verify the configuration using either of the following commands:
show vlan port command as described in Showing a VLAN Port on page 151
show vlan name command as described in Showing a VLAN Name on page 149
Configuring Protocol-Based VLANs
A protocol VLAN filters protocol traffic from being forwarded out of the switch. Use a
protocol VLAN when only one of the supported protocols—ARP, IP or IPX—should run
on the VLAN. Protocol VLANs are configured in a similar manner as port-based VLANs.
To create a Protocol-Based VLAN:
1 Assign the VLAN ID. See Creating the VLAN and Assigning a VLAN ID on page 134
for more details.
2 (Optional) Assign a name to the VLAN. See Assigning a Name to the VLAN on
page 135 for more details.
3 Assign ports to the VLAN and (optionally) set egress tagging