Supermicro SSE-F3548S - 3.12 Ingress Filter

Supermicro SSE-F3548S/SSE-F3548SR Configuration User’s Guide
105
frame types accepted on these ports.
Any untagged or priority tagged packets
received will be dropped.
Step 3b
switchport acceptable-frame-type
untaggedAndPrioritytagged
This command makes only untagged
and priority tagged frame types
accepted on these ports.
Any tagged packets received will be
dropped.
Step 3c
switchport acceptable-frame-type all
This command makes accepting all
frame types the default behavior.
Step 3d
no switchport acceptable-frame-type
This command makes accepting all
frame types the default behavior.
Step 4
show vlan port config port <iftype> <ifnum>
Displays the configured mode and
access VLAN for this interface.
Step 5
write startup-config
Optional step – saves this VLAN
configuration to be part of startup
configuration.
The examples below show various ways to configure acceptable frame types on switch ports.
Configure fx 0/1 to fx 0/10 to accept only untagged and priority tagged packets.
SMIS# configure terminal
SMIS(config)# interface range fx 0/1-10
SMIS(config-if)# switchport acceptable-frame-type untaggedAndPrioritytagged
SMIS(config-if)# exit
Configure port channel interface 1 to accept only tagged packets.
SMIS# configure terminal
SMIS(config)# interface po 1
SMIS(config-if)# switchport acceptable-frame-type tagged
SMIS(config-if)# exit
3.12 Ingress Filter
By default, Supermicro switch has the ingress filter enabled. The ingress filter drops packets that do not
match the configured VLAN membership.
For example, if the switch has two VLANs configured as 10 and 20, the ports configured with only VLAN 10
can accept packets with the VLAN header having VLAN identifier 20. This is called VLAN hoping. To prevent
VLAN hoping, the ingress filter is enabled to drop those packets with a different VLAN identifier than the
VLAN configured on the port.
The ingress filter can be disabled to allow VLAN hoping if needed.