port discard tagged-packet

Function

The port discard tagged-packet command configures an interface to discard incoming tagged frames.

The undo port discard tagged-packet command configures an interface not to discard incoming tagged frames.

By default, an interface does not discard incoming tagged frames.

Format

port discard tagged-packet

undo port discard tagged-packet

Parameters

None

Views

Ethernet interface view, GE interface view, XGE interface view, 25GE interface view, 40GE interface view, 100GE interface view, MultiGE interface view, VE interface view, Eth-Trunk interface view, port group view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

All frames sent from user devices are untagged, so user-side interfaces on a switch should not receive tagged frames. If a user connects a switching device to a user-side interface without permission, the user-side interface may receive tagged frames. The port discard tagged-packet command enables the user-side interface to discard untagged frames, preventing unauthorized access.

Precautions

The port discard tagged-packet command cannot function when dot1q-tunnel interfaces are configured on switches except the S5720-HI, S5730-HI, S5731-H, S5731-S, S5731S-H, S5731S-S, S5732-H, S6720-HI, S6730-H, S6730S-H, S6730-S, and S6730S-S.

Use this command only on interfaces connected to user devices. If you run this command on a network-side interface, users in the same VLAN may fail to communicate.

Example

# Configure GE0/0/1 to discard incoming tagged frames.

<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] port discard tagged-packet