VLAN and Private VLAN Commands
This chapter has the commands used to manage VLANs and private VLANs.
show dtag vlan
Use this command to display information about VLAN double tagging.
Command Syntax
show dtag vlan DTAG_VLAN_ID
Parameters
DTAG-VLAN-IDs
Outer-VLAN identifier and inner-VLAN identifier in the format 100.200, where 100 is the outer tag and 200 is the inner tag
Command Mode
Exec mode and Privileged Exec mode
Applicability
This command was introduced before OcNOS version 1.3.
Example
#show dtag vlan 2000.3001
Table 7-16 explains the output.
Table 7-16: show dtag vlan output
Field | Description |
|---|
Bridge | Bridge number |
VLAN ID | VLAN identifier |
Name | Double tag-VLAN identifers |
State | VLAN state: ACTIVE, SUSPEND, or INVALID |
H/W Status | Hardware status: UP or DOWN |
Member ports | Interfaces that are part of the VLAN and whether untagged (u) or tagged (t) |
show vlan access-map
Use this command to display information for VLAN access maps.
Command Syntax
show vlan access-map
Parameters
None
Command Mode
Exec mode and Privileged Exec mode
Applicability
This command was introduced before OcNOS version 1.3.
Example
#show vlan access-map
Vlan access-map myMap 10
match ip: myMap
action: drop
show vlan
Use this command to display information about static, dynamic or all VLANs.
Command Syntax
show vlan (all|static|dynamic|auto) bridge <1-32>
Parameters
<1-32>
Displays the bridge group ID.
all
Displays all VLANs (static and dynamic).
static
Displays static VLANs.
dynamic
Displays dynamic VLANs.
auto
Displays auto configured VLANs.
Command Mode
Exec mode and Privileged Exec mode
Applicability
This command was introduced before OcNOS version 1.3.
Example
#sh vlan all bridge 1
Bridge VLAN ID Name State H/W Status Member ports
(u)-Untagged, (t)-Tagged
======= ======= ================ ======= ========== ==========================
1 1 default ACTIVE Up xe2(u) xe10(u)
1 2 vlan2 ACTIVE Up xe10(t)
1 10 VLAN0010 ACTIVE Up xe2(t) xe10(t)
1 20 VLAN0020 ACTIVE Up xe2(t) xe10(t)
1 30 VLAN0030 ACTIVE Up xe10(t)
1 40 VLAN0040 ACTIVE Up xe10(t)
1 50 VLAN0050 ACTIVE Up xe10(t)
1 60 VLAN0060 ACTIVE Up xe10(t)
#
Table 7-17 Explains the show command output fields.
Table 7-17: show vlan output fields
Table 7-18:
Field | Description |
|---|
Bridge | Number of bridge in the interface. |
VLAN ID | VLAN identifier of the VLAN listed. |
Name | Name of the VLAN. |
State | Indicates whether the physical link is operational and can pass packets. |
H/W Status | Indicates that the hardware is operational. |
Member ports | The tagged interfaces to which a VLAN is associated. |
show vlan brief
Use this command to display brief VLAN information for all bridges.
Command Syntax
show vlan (brief | <2-4094>)
Parameters
None
Command Mode
Exec mode and Privileged Exec mode
Applicability
This command was introduced before OcNOS version 1.3.
Example
The following is a sample output from this command when using the all parameter.
#show vlan brief
Bridge VLAN ID Name State Member ports
(u)-Untagged, (t)-Tagged
=============== ======= ================ ======= ===============================
1 1 default ACTIVE eth2(u)
0 1 default ACTIVE
0 2 new ACTIVE
Table 7-19 Explains the show command output fields.
Table 7-19: show vlan brief output fields
Table 7-20:
Field | Description |
|---|
Bridge | Number of bridge in the interface. |
VLAN ID | VLAN identifier of the VLAN listed. |
Name | Name of the VLAN. |
State | Indicates whether the physical link is operational and can pass packets. |
H/W Status | Indicates that the hardware is operational. |
Member ports | The tagged interfaces to which a VLAN is associated. |
show vlan classifier
Use this command to display information on configured VLAN classifier groups, interfaces configured for a VLAN group or all the groups, or all configured VLAN classifier rules.
If either a group ID or rule ID is not specified, all configured VLAN classifier rules are shown. If either a group ID or rule ID is specified, a specific configured VLAN classifier rule is shown.
Command Syntax
show vlan classifier group interface IFNAME
show vlan classifier group (<1-16>|)
show vlan classifier rule(<1-256>|)
Parameters
group
Displays group activated information.
<1-16>
Displays the group ID
interface
Displays interface information.
interface
Displays interface group information.
group
Displays group activated information.
<1-16>
Displays the group ID.
rule
Displays VLAN classifier rule ID.
<1-256>
Displays rule ID information.
Command Mode
Exec mode and Privileged Exec mode
Applicability
This command was introduced before OcNOS version 1.3.
Example
This example displays groups for VLAN classifier groups:
#show vlan classifier group 1
vlan classifier group 1 add rule 1
This example displays interfaces for all VLAN classifier groups:
#show vlan classifier interface group
vlan classifier group 1 interface fe2
vlan classifier group 1 interface fe3
vlan classifier group 2 interface fe5
vlan classifier group 3 interface fe7
This example displays interfaces for VLAN classifier group 1:
#show vlan classifier interface group 1
vlan classifier group 1 interface fe2
vlan classifier group 1 interface fe3
This example displays interfaces for VLAN classifier rule 1:
#show vlan classifier rule 1
vlan classifier rule 1 mac 222.2222.2222 vlan 2
show vlan-reservation
Use this command to display reserved vlans that are configured via vlan-reservation configuration on the switch.
Command Syntax
show vlan-reservation
Parameters
None
Command Mode
Exec mode
Applicability
This command was introduced before OcNOS version 5.1.
Example
OcNOS#show vlan-reservation
VLAN ID Status
======= ======
500 free
501 free
502 free
503 free
504 free
505 free
506 free
507 free
508 free
509 free
510 free
OcNOS#
If user enables port breakout on any of the interface
OcNOS(config)#interface xe54/1
OcNOS(config-if)#port breakout enable
OcNOS(config-if)#commit
Each subsidiary ports 54/2, 54/3, 54/4 will get vlan-id from the vlan-reservation pool and the status of vlan-id changes to "allocated".
OcNOS#show vlan-reservation
VLAN ID Status
======= ======
500 allocated
501 allocated
502 allocated
503 free
504 free
505 free
506 free
507 free
508 free
509 free
510 free
OcNOS#
Note: From OcNOS version 5.1, it is mandatory to configure vlan-reservation prior to port breakout configuration.
switchport access
Use this command to change the default VLAN on the current interface.
Note: IP Infusion Inc. does not recommend using VLAN identifier 1 because of interoperability issues with other vendors’ equipment.
Use the no parameter to remove an existing VLAN.
Command Syntax
switchport access vlan <2-4094>
no switchport access vlan
Parameter
<2-4094>
Specify the VLAN identifier.
Default
The switchport access vlan default value is 3968.
Command Mode
Interface mode
Applicability
This command was introduced before OcNOS version 1.3.
Examples
This example shows the steps of a typical VLAN session, creating and destroying a VLAN.
#configure terminal
(config)#interface eth0
(config-if)#switchport access vlan 3
(config)#interface eth0
(config-if)#no switchport access vlan
switchport hybrid
Use this command to set the switching characteristics of the interface to hybrid. Both tagged and untagged frames will be classified over hybrid interfaces.
For a VLAN range, specify two VLAN identifiers: the lowest and then the highest separated by a hyphen. For a VLAN list, specify the VLAN identifiers separated by commas. Do not enter spaces between the hyphens or commas.
Use the no parameter to turn off allowed hybrid switching.
Command Syntax
switchport hybrid allowed vlan all
switchport hybrid vlan <2-4094>
switchport hybrid allowed vlan none
switchport hybrid allowed vlan except VLAN_ID
switchport hybrid allowed vlan remove VLAN_ID
switchport hybrid allowed vlan add VLAN_ID egress-tagged (enable|disable)
no switchport hybrid
no switchport hybrid vlan
Parameters
all
Allow all VLANs to transmit and receive through the interface.
none
Allow no VLANs to transmit and receive through the interface.
except
Allow all VLANs except these VLANs to transmit and receive through the interface.
VLAN_ID
VLAN identifier(s) <2-4094>. You can specify a single VLAN, a VLAN range, or a VLAN list.
remove
Remove these VLANs from the member set.
VLAN_ID
VLAN identifier(s) <2-4094>. You can specify a single VLAN, a VLAN range, or a VLAN list.
add
Add these VLANs to the member set.
VLAN_ID
VLAN identifier(s) <2-4094>. You can specify a single VLAN, a VLAN range, or a VLAN list.
egress-tagged
Whether to tag outgoing frames.
enable
Enable egress tagging for outgoing frames.
disable
Disable egress tagging for outgoing frames.
Default
By default, switchport hybrid is enabled.
Command Mode
Interface mode
Applicability
This command was introduced before OcNOS version 1.3.
Examples
The following shows adding a single VLAN to the member set.
(config-if)#switchport hybrid allowed vlan add eg
switchport hybrid allowed vlan add 2 egress-tagged enable
The following shows adding a range of VLANs to the member set.
(config-if)#switchport hybrid allowed vlan add eg
switchport hybrid allowed vlan add 2-4 egress-tagged enable
switchport mode
Use this command to set the switching characteristics of the Layer 2 interface.
Command Syntax
switchport mode (access|hybrid|trunk|provider-network|customer-edge
|customer-network|private-vlan)
Parameters
access
Access.
hybrid
Hybrid.
trunk
Trunk.
provider-network
Provider network.
customer-network
Customer network.
Default
By default, switchport mode hybrid is enabled.
Configuring an interface to operate in trunk mode using the CLI command switchport mode trunk will automatically permit VLAN ID 1 on the trunk ports by default.
Command Mode
Interface mode
Applicability
This command was introduced before OcNOS version 1.3.
Example
#configure terminal
(config)#interface eth0
(config-if)#switchport mode access
switchport mode access ingress-filter
Use this command to set the switching characteristics of the interface to access mode, and classify untagged frames only. Received frames are classified based on the VLAN characteristics, then accepted or discarded based on the specified filtering criteria.
Command Syntax
switchport mode access ingress-filter (enable|disable)
Parameters
ingress-filter
Set the ingress filtering for the received frames.
enable
Set the ingress filtering for received frames. Received frames that cannot be classified in the previous step based on the acceptable frame type parameter (access/trunk) are discarded. This is the default value.
disable
Turn off ingress filtering to accept frames that do not meet the classification criteria.
Default
Received frames that cannot be classified in the previous step based on the acceptable frame type parameter (access/trunk) are discarded.
Command Mode
Interface mode
Applicability
This command was introduced before OcNOS version 1.3.
Example
#configure terminal
(config)#interface eth0
(config-if)#switchport mode access ingress-filter enable
switchport mode hybrid acceptable-frame-type
Use this command to set the interface acceptable frame types. This processing occurs after VLAN classification.
Use no form of this command to unconfigure the interface acceptable frames.
Command Syntax
switchport mode hybrid acceptable-frame-type (all|vlan-tagged)
no switchport hybrid
Parameters
all
Set all frames can be received
vlan-tagged
Accept only classified frames that belong to the port's member set.
Default
Received frames that cannot be classified in the previous step based on the acceptable frame type parameter (access/trunk) are discarded.
Command Mode
Interface mode
Applicability
This command was introduced before OcNOS version 1.3.
Example
#configure terminal
(config)#interface eth0
(config-if)#switchport mode hybrid acceptable-frame-type vlan-tagged
switchport mode hybrid ingress-filter
Use this command to set the switching characteristics of the interface as hybrid, and classify both tagged and untagged frames. Received frames are classified based on the VLAN characteristics, then accepted or discarded based on the specified filtering criteria.
Command Syntax
switchport mode hybrid ingress-filter (enable|disable)
Parameters
enable
Set the ingress filtering for received frames. Received frames that cannot be classified in the previous step based on the acceptable frame type parameter (access/trunk) are discarded. This is the default value.
disable
Turn off ingress filtering to accept frames that do not meet the classification criteria.
Default
Received frames that cannot be classified in the previous step based on the acceptable frame type parameter (access/trunk) are discarded.
Command Mode
Interface mode
Applicability
This command was introduced before OcNOS version 1.3.
Examples
#configure terminal
(config)#interface eth0
(config-if)#switchport mode hybrid ingress-filter enable
switchport mode trunk ingress-filter
Use this command to set the switching characteristics of the interface as trunk, and specify only tagged frames. Received frames are classified based on the VLAN characteristics, then accepted or discarded based on the specified filtering criteria.
Command Syntax
switchport mode trunk ingress-filter (enable|disable)
Parameters
ingress-filter
Set the ingress filtering for the received frames.
enable
Set the ingress filtering for received frames. Received frames that cannot be classified in the previous step based on the acceptable frame type parameter (access/trunk) are discarded. This is the default value.
disable
Turn off ingress filtering to accept frames that do not meet the classification criteria.
Default
Received frames that cannot be classified in the previous step based on the acceptable frame type parameter (access/trunk) are discarded.
Command Mode
Interface mode
Applicability
This command was introduced before OcNOS version 1.3.
Examples
#configure terminal
(config)#interface eth0
(config-if)#switchport mode trunk ingress-filter enable
switchport trunk allowed
Use this command to set the switching characteristics of the interface to trunk.
For a VLAN range, specify two VLAN identifiers: the lowest and then the highest separated by a hyphen. For a VLAN list, specify the VLAN identifiers separated by commas. Do not enter spaces between the hyphens or commas.
Use the no parameter to remove all VLAN identifiers configured on this port.
Command Syntax
switchport trunk allowed vlan all
switchport trunk allowed vlan none
switchport trunk allowed vlan add VLAN_ID
switchport trunk allowed vlan except VLAN_ID
switchport trunk allowed vlan remove VLAN_ID
no switchport trunk
Parameters
all
Allow all VLANs to transmit and receive through the interface.
none
Allow no VLANs to transmit and receive through the interface.
add
Add these VLANs to the member set.
VLAN_ID
VLAN identifier(s) <2-4094>. You can specify a single VLAN, a VLAN range, or a VLAN list.
except
All VLANs except these VLANs are part of the member set.
VLAN_ID
VLAN identifier(s) <2-4094>. You can specify a single VLAN, a VLAN range, or a VLAN list.
remove
Remove these VLANs from the member set.
VLAN_ID
VLAN identifier(s) <2-4094>. You can specify a single VLAN, a VLAN range, or a VLAN list.
Default
Received frames that cannot be classified in the previous step based on the acceptable frame type parameter (access/trunk) are discarded.
Command Mode
Interface mode
Applicability
This command was introduced before OcNOS version 1.3.
Examples
The following shows adding a single VLAN to the port’s member set.
(config)#interface eth0
(config-if)#switchport trunk allowed vlan add 2
The following shows adding a range of VLANs to the port’s member set.
(config)#interface eth0
(config-if)#switchport trunk allowed vlan add 2-4
switchport trunk allowed vlan dtag
Use this command to maintain a mapping between the double-tagged logical interfaces with the physical interfaces for the purpose of enabling VLAN-translation on the port alone.
An example of when to use this command is in a GPON application, where an S-tag uniquely identifies an OLT channel partition and a C-tag uniquely identifies a subscriber/service on that channel partition.
Command Syntax
switchport trunk allowed vlan add dtag DTAG-VLAN-IDs
switchport trunk allowed vlan remove dtag DTAG-VLAN-IDs
Parameters
add
Add a mapping
remove
Remove a mapping
DTAG-VLAN-IDs
Outer-VLAN identifier and inner-VLAN identifier in the format 100.200, where 100 is the outer tag and 200 is the inner tag
Default
None
Command Mode
Interface mode
Applicability
This command was introduced before OcNOS version 1.3.
Examples
(config)#int mlag1
(config-if)#switchport
(config-if)#bridge-group 1
(config-if)#switchport mode trunk
(config-if)#switchport trunk allowed vlan add 100,2000
(config-if)#switchport trunk allowed vlan add dtag 2000.3001
switchport trunk native
Use this command to configure native VLANs for this port. The native VLAN is used for classifying the incoming untagged packets.
Use the no parameter to revert the native VLAN to the default VLAN identifier 1.
Command Syntax
switchport trunk native vlan VLAN_ID
no switchport trunk native vlan
Parameter
VLAN_ID
VLAN identifier(s) <1-4094>. You can specify a single VLAN, or a VLAN list.
For a VLAN list, specify the VLAN identifiers separated by commas. Do not enter spaces in between the hyphens or commas.
Default
The default is that ingress filtering is off and all frame types are classified and accepted.
Command Mode
Interface mode
Applicability
This command was introduced before OcNOS version 1.3.
Examples
#configure terminal
(config)#interface eth0
(config-if)#switchport trunk native vlan 2
(config)#interface eth0
(config-if)#no switchport trunk native vlan
vlan classifier activate
Use this command to activate the VLAN classifier.
Use no form of this command to deactivate the VLAN classifier.
Command Syntax
vlan classifier activate <1-16> vlan <2-4096>
no vlan classifier activate <1-16>
Parameters
<1-16>
Indicates the VLAN classifier activate identifier.
<2-4094>
VLAN identifier of the primary VLAN.
Default
By default, vlan classifier activate value is 1
Command Mode
Interface mode
Applicability
This command was introduced before OcNOS version 1.3.
Example
#configure terminal
(config)#interface eth2
(config-if)#vlan classifier activate 1 vlan 2
(config-if)#no vlan classifier activate 1
vlan classifier group
Use this command to create a subnet-based VLAN classifier group. A group indicates a VLAN classifier group ID.
Command Syntax
vlan classifier group <1-16> (add | delete) rule <1-256>
no vlan classifier group <1-16>
Parameters
add
Adds a rule to a group.
delete
Deletes a rule from a group.
rule
Indicates the VLAN classifier rule identifier <1-256>.
Default
By default, vlan classifier group value is 1
Command Mode
Configure mode
Applicability
This command was introduced before OcNOS version 1.3.
Example
#configure terminal
(config)#vlan classifier group 1 delete rule 1
(config)#no vlan classifier group 2
vlan classifier rule ipv4
Use this command to create a subnet-based VLAN classifier rule and map it to a specific VLAN. If the source IP address matches the IP subnet specified in the VLAN classifier rule, received packets are mapped to the designated VLAN.
Command Syntax
vlan classifier rule <1-256> ipv4 A.B.C.D/M
no vlan classifier rule <1-256>
Parameters
A.B.C.D/M
Indicates the IPv4 address classification. Enter the address in A.B.C.D/M format.
Default
By default, vlan classifier rule is VLAN1
Command Mode
Configure mode
Applicability
This command was introduced before OcNOS version 1.3.
Example
#configure terminal
(config)#vlan classifier rule 2 ipv4 20.20.20.2/24
(config)#no vlan classifier rule 2
vlan classifier rule mac
Use this command to create a subnet-based VLAN classifier rule and map it to a specific VLAN.
If the source IP address matches the IP subnet specified in the VLAN classifier rule, received packets are mapped to the designated VLAN.
Command Syntax
vlan classifier rule <1-256> mac WORD
no vlan classifier rule <1-256>
Parameters
WORD
Indicate the Mac address classification. Enter the address in HHHH.HHHH.HHHH format.
Default
By default, vlan classifier rule value is VLAN1
Command Mode
Configure mode
Applicability
This command was introduced before OcNOS version 1.3.
Example
#configure terminal
(config)#vlan classifier rule 2 mac fe80::22e::b5ff:fee8:6/64
(config)#no vlan classifier rule 2
vlan classifier rule proto
Use this command to create a subnet-based VLAN classifier rule for a protocol and map it to a specific VLAN. If the source IP address matches the IP subnet specified in the VLAN classifier rule, received packets are mapped to the designated VLAN.
Command Syntax
vlan classifier rule <1-256> proto (ETHERTYPE|ip|x25|arp|g8bpqx25|ieeepup|ieeeaddrtrans|dec|decdnadumpload|decdnaremoteconsole|decdnarouting|declat|decdiagnostics|rarp|atalkddp|atalkaarp|ipx|ipv6|atmmulti|pppdiscovery|pppsession|atmtransport)
no vlan classifier rule <1-256>
Parameters
ETHERTYPE
Ethernet type
ip
IP address
x25
CCITT X.25
arp
Address Resolution Protocol
g8bpqx25
G8BPQ AX.25
ieeepup
Xerox IEEE802.3 PUP
ieeeaddrtrans
Xerox IEEE802.3 PUP Address Translation
dec
DEC Assigned
decdnadumpload
DEC DNA Dump/Load
decdnaremoteconsole
DEC DNA Remote Console
decdnarouting
DEC DNA Routing
declat
DEC LAT
decdiagnostics
EC Diagnostics
rarp
Reverse Address Resolution
atalkddp
Appletalk DDP
atalkaarp
Appletalk AARP
ipx
IPX address
ipv6
IPv6 address
atmmulti
MultiProtocol Over ATM
pppdiscovery
PPPoE discovery
pppsession
PPPoE session
atmtransport
Frame-based ATM Transport
deccustom
DEC Customer use
decsyscomm
DEC Systems Comms Arch
xeroxaddrtrans
Xerox PUP Address Translation
Default
By default, VLAN classifier rule value is VLAN1
Command Mode
Configure mode
Applicability
This command was introduced before OcNOS version 1.3.
Example
#configure terminal
(config)#vlan classifier rule 2 proto ip
(config)#no vlan classifier rule 2
vlan database
Use this command to enter the VLAN configuration mode to add, delete, or modify values associated with a single VLAN.
Command Syntax
vlan database
Parameters
None
Default
No default value is specified
Command Mode
Configure mode
Applicability
This command was introduced before OcNOS version 1.3.
Example
In the following example, note the change to VLAN configuration mode from Configure mode:
#configure terminal
(config)#vlan database
(config-vlan)#
vlan dtag
Use this command to enable or disable double tagging packets with an outer-VLAN identifier and an inner-VLAN identifier.
An example of when to use this command is in a GPON application, where an S-tag uniquely identifies an OLT channel partition and a C-tag uniquely identifies a subscriber/service on that channel partition.
Use the no form of this command to not double tag packets.
Command Syntax
vlan dtag DTAG-VLAN-IDs bridge <1-32> state (enable|disable) subscriber
no vlan dtag DTAG-VLAN-IDs bridge <1-32>
Parameters
DTAG-VLAN-IDs
Outer-VLAN identifier and inner-VLAN identifier in the format 100.200, where 100 is the outer tag and 200 is the inner tag
<1-32>
Bridge number
enable
Enable double tagging
disable
Suspend double tagging
Default
No default value is specified
Command Mode
VLAN database mode
Applicability
This command was introduced before OcNOS version 1.3.
Example
(config)#vlan database
(config-vlan)#vlan dtag 2000.3001 bridge 1 state enable subscriber
vlan-reservation
Use this command to create/delete vlan reservation pool on the switch.
Command Syntax
vlan-reservation VLAN_RANGE
no vlan-reservation VLAN_RANGE
Parameters
VLAN_RANGE
VLAN ID 2-4094 or range(s): 2-5,10 or 2-5,7-19
Default
No default value is specified
Command Mode
Configure mode
Applicability
This command was introduced before OcNOS version 5.1.
Example
In the following example, note the change to VLAN configuration mode from Configure mode:
#configure terminal
(config)#vlan database
(config-vlan)#
vlan state
This command enables or disables the state of a particular VLAN on the bridge.
Command Syntax
vlan <2-4094> bridge <1-32> (state (enable|disable)|)
Parameters
<1-32>
Specify bridge group ID
state
Indicates the operational state of the VLAN
enable
Sets VLAN into a enable state.
disable
Sets VLAN into a disable state.
name
The VLAN name
WORD
The name of the VLAN
Default
By default, vlan bridge state is disabled.
Command Mode
VLAN Configuration mode
Applicability
This command was introduced before OcNOS version 1.3.
Examples
#configure terminal
(config)#vlan database
(config-vlan)#vlan 45 bridge 1 state enable
vlan VLAN_RANGE bridge
.This command allows you to create a single/range of VLAN’s on the VLAN aware bridges.
Use the no form of this command to delete the VLAN.
Command Syntax
vlan VLAN_RANGE bridge <1-32>
vlan VLAN_RANGE bridge <1-32> (name WORD|) state (enable | disable)
no vlan VLAN_RANGE bridge <1-32>
Parameters
VLAN_RANGE
The vlan-id or range of vlan-id's separated by ','&'-'
bridge
Specify the bridge group ID in the range <1-32>.
state
Indicates the operational state of the VLAN.
enable
Sets VLAN into an enable state.
disable
Sets VLAN into a disable state.
Default
By default, vlan bridge state is disabled
Command Mode
Configuration Mode
Applicability
This command was introduced before OcNOS version 1.3.
Examples
(config)#vlan 3-40,56 bridge 4
(config)#no vlan 2-5 bridge 2