set port ingress filter
SecureStack C2 Configuration Guide 10-11
set port ingress filter
UsethiscommandtodiscardallframesreceivedwithaVLANIDthatdon’tmatchtheport’s
VLANegresslist.
Syntax
set port ingress-filter port-string {disable | enable}
Parameters
Defaults
None.
Mode
Switchcommand,read‐write.
Usage
Wheningressfilteringisenabledonaport,theVLANIDsofincomingframesarecomparedtothe
port’segresslist.IfthereceivedVLANIDdoesnotmatchaVLANIDontheport’segresslist,then
theframeisdropped.
IngressfilteringisimplementedaccordingtotheIEEE802.1Q
standard.
Example
Thisexampleshowshowtoenableportingressfilteringonge.1.3:
C2(su)->set port ingress-filter ge.1.3 enable
show port discard
Usethiscommandtodisplaytheframediscardmodeforoneormoreports.Portscanbesetto
discardframesbasedonwhetherornottheframecontainsaVLANtag.Theycanalsobesetto
discardbothtaggedanduntaggedframes,orneither.
Syntax
show port discard [port-string]
Parameters
Defaults
If port-string is not specified, frame discard mode will be displayed for all
ports.
port‐string Specifiestheport(s)onwhichtoenableofdisableingressfiltering.Fora
detaileddescriptionofpossibleport‐stringvalues,referto“PortString
SyntaxUsedintheCLI”onpage 7‐2.
disable|enable Disablesorenablesingressfiltering.
port‐string (Optional)Displaystheframediscardmodeforspecificport(s).Fora
detaileddescriptionofpossibleport‐stringvalues,referto“PortString
SyntaxUsedintheCLI”onpage 7‐2.