The SAP encapsulation definition on Ethernet ingress ports defines which VLAN tags are used to determine the service that the packet belongs:
null encapsulation defined on ingress
Any VLAN tags are ignored and the packet goes to a default service for the SAP
dot1q encapsulation defined on ingress
Only first VLAN tag is considered.
dot1q Default encapsulation defined on ingress
Tagged packets not matching any of the configured VLAN encapsulations would be accepted. This is like a default SAP for tagged packets.
dot1q Explicit Null encapsulation defined on ingress
Any untagged or priority tagged packets are accepted.