Ingress VLAN Security enables easy implementation of security, and is always active. A port that is assigned to a VLAN allows packets tagged for that VLAN only to enter through that port. Unassigned packets receive the PVID of the port and are therefore allowed to enter.