So the switch with this command will tag the primary VLAN for outgoing traffic on the trunk, and reject all incoming untagged traffic, with the exception of control traffic.    "Control traffic continues to be accepted as untagged on the native VLAN ...