Cisco Systems SRW248G4PK9NA User Manual

Page of 483
VLAN Management
Defining VLAN Membership
191
Cisco Small Business 300 Series Managed Switch Administration Guide 
12
-
Admit Tagged Only—The interface accepts only tagged frames.
-
Admit Untagged Only—The interface accepts only untagged and 
priority frames. 
Ingress Filtering—(Available only in General mode) Select to enable ingress 
filtering. When an interface is ingress filtering enabled, the interface discards 
all incoming frames that are classified as VLANs of which the interface is not 
a member. Ingress filtering can be disabled or enabled on general ports. It is 
always enabled on access ports and trunk ports.
STEP  5
Click Apply. The parameters are written to the Running Configuration file.
Defining VLAN Membership 
The Port to VLAN and Port VLAN Membership pages display the VLAN 
memberships of the ports in various presentations. You can use them to add or 
remove memberships to or from the VLANs. 
When a port is forbidden default VLAN membership, that port is not allowed 
membership in any other VLAN. An internal VID of 4095 is assigned to the port.
To forward the packets properly, intermediate VLAN-aware devices that carry 
VLAN traffic along the path between end nodes must either be manually 
configured or must dynamically learn the VLANs and their port memberships from 
Generic VLAN Registration Protocol (GVRP).
Untagged port membership between two VLAN-aware devices with no 
intervening VLAN-aware devices, must be to the same VLAN. In other words, the 
PVID on the ports between the two devices must be the same if the ports are to 
send and receive untagged packets to and from the VLAN. Otherwise, traffic might 
leak from one VLAN to another. 
Frames that are VLAN-tagged can pass through other network devices that are 
VLAN-aware or VLAN-unaware. If a destination end node is VLAN-unaware, but is 
to receive traffic from a VLAN, then the last VLAN-aware device (if there is one), 
must send frames of the destination VLAN to the end node untagged.