C
OMMAND
L
INE
I
NTERFACE
4-192
• The interface can be added to a VLAN as an untagged member
regardless of connected devices to this interface. The default setting is
untagged VLAN 1. Note that each port can only have one untagged
VLAN. If a second VLAN is defined for a port as untagged, the other
VLAN that had untagged status will automatically be changed to
tagged. Setting a VLAN untagged will also change the native VLAN
of the port to this VLAN.
• If a VLAN on the forbidden list for an interface is manually added to
that interface, the VLAN is automatically removed from the
forbidden list for that interface.
Example
The following example shows how to add VLANs 1, 2, 5 and 6 to the
allowed list as tagged VLANs for port 1.
switchport forbidden vlan
This command configures forbidden VLANs. Use the no form to remove
the list of forbidden VLANs.
Syntax
switchport forbidden vlan {add vlan-list | remove vlan-list}
no switchport forbidden vlan
• add vlan-list - List of VLAN identifiers to add.
• remove vlan-list - List of VLAN identifiers to remove.
• vlan-list - Separate nonconsecutive VLAN identifiers with a comma
and no spaces; use a hyphen to designate a range of IDs. Do not
enter leading zeros. (Range: 1-4093).
Default Setting
No VLANs are included in the forbidden list.
Command Mode
Interface Configuration (Ethernet, Port Channel)
Console(config)#interface ethernet 1/1
Console(config-if)#switchport allowed vlan add 1,2,5,6 tagged
Console(config-if)#