Administrator Guide

Layer 2 Switching Commands 825
VLAN ID 10. Then, in the last command, the port is configured to accept the
VMAN TPID in the outer VLAN on ingress and further configured to tag
packets with the VMAN TPID in the outer VLAN tag on egress.
console(config)#switchport dot1q ethertype vman
console(config)#vlan 10
console(config-vlan10)#exit
console(config)#interface te1/0/1
console(config-if-Te1/0/1)#switchport mode general
console(config-if-Te1/0/1)#switchport general allowed vlan add 10 tagged
console(config-if-Te1/0/1)#switchport dot1q ethertype vman primary-tpid
switchport general forbidden vlan
Use the switchport general forbidden vlan command in Interface
Configuration mode to forbid adding specific VLANs to a general mode port.
To revert to allowing the addition of specific VLANs to the port, use the
remove parameter of this command.
Syntax
switchport general forbidden vlan {add vlan-list | remove vlan-list}
• add vlan-list — List of valid VLAN IDs to add to the forbidden list.
Separate nonconsecutive VLAN IDs with a comma and no spaces. Use a
hyphen to designate a range of IDs.
• remove vlan-list — List of valid VLAN IDs to remove from the forbidden
list. Separate nonconsecutive VLAN IDs with a comma and no spaces. Use
a hyphen to designate a range of IDs.
Default Configuration
All VLANs allowed.
Command Mode
Interface Configuration (Ethernet and port channel) mode