Switch ports can be set to two different types, an 

access port or a trunk port.

Access port
An access port is configured with a single VLAN. This VLAN configuration is transparent to the
end device (Rubrik) that is connected to the port. This means the end device simply send its
untagged traffic to the switch port and the switch will place the appropriate VLAN tag on the
packets. The access port will only accept untagged traffic.

No VLANs are configured on Rubrik. Rubrik sends out untagged traffic. The network admin has set
the access port to VLAN 5. The switch tags all incoming packets to VLAN 5.

Trunk port (requires Rubrik CDM 4.1 or higher)

A trunk port can be configured to transport multiple VLANs. Since the switch does not know what
packet to tag to what VLAN, the end device (Rubrik) should tag the packets when they are sent to
the trunk port. The trunk port will only accept tagged traffic.

Rubrik has been configured with VLANs 3, 5 and 8. Rubrik sends out tagged traffic. The network
admin has configured the trunk port to allow VLANs 3, 5 and 8.

Trunk port with native VLAN (requires Rubrik CDM 4.1 or higher)

A trunk port can be optionally configured with a native VLAN.  All incoming untagged traffic will
be tagged by the switch to the configured native VLAN. You can only set a single VLAN as the
native VLAN. A trunk port with native VLAN will accept both tagged and untagged traffic.

Rubrik has been configured with VLANs 3 and 5 and a network containing no VLAN. The network
admin has configured the trunk port to allow VLANs 3 and 5 and has set the native VLAN to 6. The
switch tags the untagged traffic to VLAN 6.

Trunk port using only the native VLAN

We can leverage the native VLAN setting to make Rubrik pré CDM 4.1 work with a trunk port
instead of an access port.

No VLANS are configured on Rubrik.  Rubrik sends out untagged traffic. The network admin has set
the native VLAN on the trunk port to VLAN 6.  The switch tags the untagged traffic to VLAN 6.

Overview

N.B. Keep in mind that VLANs do not separate traffic flows. All VLAN interfaces are created equal
and will serve data + management traffic!