Brocade FastIron Ethernet Switch Platform and Layer 2 Switching Configuration Guide - Manual (Page 30)

NOTE
The second command is optional and also creates the VLAN if the VLAN does not already exist. You
can enter the first command after you enter the second command if you first exit to the global CONFIG
level of the CLI.
Assigning IEEE 802.1Q tagging to a port
When a port is tagged, it allows communication among the different VLANs to which it is assigned. A
common use for this might be to place an email server that multiple groups may need access to on a
tagged port, which in turn, is resident in all VLANs that need access to the server.
NOTE
Tagging does not apply to the default VLAN.
When using the CLI, ports are defined as either tagged or untagged at the VLAN level.
Command syntax for assigning 802.1Q tagging to a port
Suppose you want to make port 5 a member of port-based VLAN 4, a tagged port. To do so, enter the
following.
device(config)#vlan 4
device(config-vlan-4)#tagged e 5
Syntax: tagged ethernet [ stack/slot/port] portnum [ to [ stack/port] portnum [ ethernet [ slotnum/ ]
portnum... ] ]
The slotnum parameter is required on chassis devices.
Defining MAC address filters
MAC layer filtering enables you to build access lists based on MAC layer headers in the Ethernet/IEEE
802.3 frame. You can filter on the source and destination MAC addresses. The filters apply to
incoming traffic only.
You configure MAC address filters globally, then apply them to individual interfaces. To apply MAC
address filters to an interface, you add the filters to that interface MAC address filter group.
The device takes the action associated with the first matching filter. If the packet does not match any
of the filters in the access list, the default action is to drop the packet. If you want the system to permit
traffic by default, you must specifically indicate this by making the last entry in the access list a permit
filter. An example is given below.
Syntax: mac filter last-index-number permit any any
For devices running Layer 3 code, the MAC address filter is applied to all inbound Ethernet packets,
including routed traffic. This includes those port associated with a virtual routing interface. However,
the filter is not applied to the virtual routing interface. It is applied to the physical port.
Assigning IEEE 802.1Q tagging to a port
30 FastIron Ethernet Switch Platform and Layer 2 Switching Configuration Guide
53-1003086-04