What is the effect of "Default VLAN ID" if the port is set to "only tagged"? Will egress packets on that VLAN ID still carry the same tag or will it be dropped?
It also seems as if "only untagged" will still allow connection from the port. e.g. switch IP is 192.168.1.3, allow only from vlan id 1, only on port 24. port24 is configured to enabled, only untagged, default vlan id 1. pinging from vlan id 1 yields some ping results but does not actually perform switching, as other pinging other switch 192.168.1.4 does not produce a reply, likely because vlan id 1 is stripped on egress from 1.3 switch.