Cisco 350 Series Administration Manual page 289

VLAN Management
Regular VLANs
Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4
- Customer—Selecting this option places the interface in QinQ mode. This enables
you to use your own VLAN arrangements (PVID) across the provider network. The
device is in Q-in-Q mode when it has one or more customer ports. See QinQ.
- Private VLAN - Host—Select to set the interface as either isolated or community.
Then select either an isolated or community VLAN in the Secondary VLAN - Host
field.
- Private VLAN - Promiscuous—Select to set the interface as promiscuous.
- VLAN Mapping - Tunnel—Select to set the interface as a VLAN tunnel edge port.
- VLAN Mapping - One to One—Select to set the interface as to be used as a VLAN
mapping one to one edge port.
• Ethertype Tagging—Select an Ethertype tagging method for the S-VLAN tag (see the
Global Ethertype Tagging field above).
• Frame Type—(Available only in General mode) Select the type of frame that the
interface can receive. Frames that are not of the configured frame type are discarded at
ingress. Possible values are:
- Admit All—The interface accepts all types of frames: untagged frames, tagged
frames, and priority tagged frames.
- Admit Tagged Only—The interface accepts only tagged frames.
- Admit Untagged Only—The interface accepts only untagged and priority frames.
• Ingress Filtering—(Available only in General mode) Select to enable ingress filtering.
When an interface is ingress filtering enabled, the interface discards all incoming frames
that are classified as VLANs of which the interface is not a member. Ingress filtering
can be disabled or enabled on general ports. It is always enabled on access ports and
trunk ports.
• Primary VLAN—Select the primary VLAN in the private VLAN. The primary VLAN
is used to allow Layer 2 connectivity from promiscuous ports to isolated ports and to
community ports. If None is selected if the interface is not in private VLAN mode.
• Secondary VLAN - Host—Select an isolated or community VLAN for those hosts that
only require a single secondary VLAN.
• Available Secondary VLANs to Selected Secondary VLANs—For promiscuous
ports, move all secondary VLANs that are required for normal packet forwarding from
the Available Secondary VLANs. Promiscuous and trunk ports can be members in
multiple VLANs.
12
233