Configuring an Interface to Discard Incoming Tagged Packets
Context
All packets sent from user devices are untagged, so user-side interfaces on a switch does not receive tagged packets, and the interface must be configured as an access interface. If a user connects a switch to a user-side interface without permission, the user-side interface may receive tagged packets. To prevent unauthorized access, you can configure the user-side interface to discard incoming tagged packets.
Only interfaces that are connected to user devices and do not receive tagged packets can be configured to discard incoming tagged packets.
Procedure
- Run system-view
The system view is displayed.
- Run interface interface-type interface-number
The member interface view is displayed.
- Run port discard tagged-packet
The interface is configured to discard incoming tagged packets.
By default, an interface does not discard incoming tagged packets.
- Run commit
The configuration is committed.