Skip to content
Any configuration changes made locally on the switch won't be synchronized with Sophos Central. We recommend making changes from the Sophos Central control panel instead.

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/switch/help/en-us/index.html?contextId=user-guide-features-configure-VLAN-settings-PVID

PVID and ingress filter

When an untagged packet enters a switch port, the PVID (Port VLAN ID) will be attached to the untagged packet. A packet received on a given port is assigned that port's PVID and then forwarded to the port corresponding to the packet's destination address. If the PVID of the port that received the packet is different from the PVID of the port that is to transmit the packet, the switch will drop the packet. Different PVIDs mean different VLANs within the switch, so VLAN identification based upon the PVIDs can't create VLANs extending outside a given switch. If no VLANs are defined on the switch, all ports are assigned to a default VLAN with a PVID equal to 1.

Option Description
Port Displays the VLAN ID to which the PVID tag is assigned. Configure the PVID to assign untagged or tagged frames received on the selected port.
PVID Enter the PVID value. The range is from 1 to 4094.
Accept Type Select Tagged Only, Untagged Only, or All frames from the list.
Tagged Only: The port discards any untagged frames it receives. The port only accepts tagged frames.
Untagged Only: Only untagged frames received on the port are accepted.
All: The port accepts both tagged and untagged frames.
Ingress filtering Specify how you wish the port to handle tagged frames. Select Enabled or Disabled from the list.
Enabled: Tagged frames are discarded if VID does not match the PVID of the port.
Disabled: All frames are forwarded in accordance with the IEEE 802.1Q VLAN.
Priority-tag ingress filtering Turn on or turn off Priority-tag ingress filtering. When you turn it on, any packets received on the port that have a VLAN ID set to 0 are dropped.

To enable PVID functionality, the following requirements must be met:

  • All ports must have a defined PVID.
  • If no other value is specified, the default VLAN PVID is used.
  • If you want to change the port's default PVID, you must create a VLAN that includes the port as a member.

Click Apply to update the system settings.