CLI Reference Guide-R02

Chapter 18 | VLAN Commands
Configuring VLAN Interfaces
– 533 –
Example
The following example shows how to add VLANs 1, 2, 5 and 6 to the allowed list as
tagged VLANs for port 1:
Console(config)#interface ethernet 1/1
Console(config-if)#switchport allowed vlan add 1,2,5,6 tagged
Console(config-if)#
switchport
ingress-filtering
This command enables ingress filtering for an interface. Use the no form to restore
the default.
Syntax
[no] switchport ingress-filtering
Default Setting
Enabled
Command Mode
Interface Configuration (Ethernet, Port Channel)
Command Usage
◆ If ingress filtering is disabled and a port receives frames classified to VLANs for
which it is not a member, these frames will be flooded to all other ports that are
members of the VLANs.
◆ If ingress filtering is enabled and a port receives frames classified to VLANs for
which it is not a member, these frames will be discarded.
◆ Ingress filtering does not affect VLAN independent BPDU frames, such as GVRP
or STA. However, they do affect VLAN dependent BPDU frames, such as GMRP.
◆ Ingress filtering cannot be enabled for a port if the port does not join the PVID
VLAN.
◆ Ingress filtering cannot be disabled for a port if loopback detection on the port
is active. (Both global and per port are enabled.)
Example
The following example shows how to set the interface to port 1 and then enable
ingress filtering:
Console(config)#interface ethernet 1/1
Console(config-if)#switchport ingress-filtering
Console(config-if)#