Skip to content
Any configuration changes made locally on the switch won't be synchronized with Sophos Central. We recommend making changes from the Sophos Central control panel instead.

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/switch/help/en-us/index.html?contextId=user-guide-features-configure-VLAN-settings-PVID

PVID and ingress filter

When an untagged packet enters a port, the switch attaches the Port VLAN ID (PVID) to it. When the switch receives a packet on a given port tagged with that port's PVID, it forwards the packet to the port corresponding to the packet's destination address. If a port receives a packet with a VLAN ID that doesn't match its PVID, the switch drops the packet. If no VLANs are configured on the switch, all ports are assigned the default VLAN ID, 1.

You can see the following information:

  • Port: Shows the port to which the voice VLAN settings apply.
  • PVID: The PVID value of the port.

  • Accept type: Shows whether the port accepts tagged, untagged, or all packets.

    • All: The port accepts both tagged and untagged packets.
    • Tagged: The port only accepts tagged packets. The port discards any untagged packets it receives.
    • Untagged: The port only accepts untagged packets. The port discards any tagged packets it receives.

  • Ingress filtering: Shows whether ingress filtering is turned on or off.

    • On: The switch discards tagged packets if the VID doesn't match the port's PVID.
    • Off: The switch forwards all packets according to the switch's VLAN configuration.

  • Priority ingress filtering: Shows whether priority ingress filtering is turned on or off. When it's on, the switch drops packets with a VLAN ID of 0.

To change PVID settings, select the ports you want to change and click Edit.

Click Apply to save your changes.