508 VLAN Commands
switchport forbidden vlan
Use the switchport forbidden vlan command in Interface Configuration mode to forbid adding 
specific VLANs to a port. To revert to allowing the addition of specific VLANs to the port, use 
the remove parameter of this command.
Syntax
switchport forbidden vlan {add 
vlan-list
|remove 
vlan-list
}
•
add
 
vlan-list
 — List of valid VLAN IDs to add to the forbidden list. Separate nonconsecutive 
VLAN IDs with a comma and no spaces. Use a hyphen to designate a range of IDs.
•
remove
 vlan-list
 — List of valid VLAN IDs to remove from the forbidden list. Separate 
nonconsecutive VLAN IDs with a comma and no spaces. Use a hyphen to designate a range of 
IDs.
Default Configuration
All VLANs allowed.
Command Mode
Interface Configuration (Ethernet, port-channel) mode
User Guidelines
This command has no user guidelines.
Example
The following example forbids adding VLAN numbers 234 through 256 to port 1/g8.
console(config)#interface ethernet 1/g8
console(config-if-1/g8)#switchport forbidden vlan add 234-256
switchport general acceptable-frame-type tagged-only
Use the switchport general acceptable-frame-type tagged-only command in Interface 
Configuration mode to discard untagged frames at ingress. To enable untagged frames at 
ingress, use the no form of this command.
Syntax
switchport general acceptable-frame-type tagged-only
no switchport general acceptable-frame-type tagged-only