To configure tunneling for ingress traffic at a port, use the set vlans dot1q-tunneling ingress from one-tag customer-vlan-list command in L2/L3 configuration mode. If the packet has a single tag and customer VLAN is specified, it can pass through the port.
set vlans dot1q-tunneling ingress tunnel-id from one-tag customer-vlan-list vlan-id
The following example configures the tunneling T1 for ingress traffic. If the packet has a single tag and customer VLAN is 10, it can pass through the port.