set vlan forbidden
14-14 802.1Q VLAN Configuration
Mode
Switch command, read-write. 
Example
This example shows you how to show VLAN egress information for ge.1.1 through 3. In this case, 
all three ports are allowed to transmit VLAN 1 frames as tagged and VLAN 10 frames as 
untagged. Both are static VLANs:
C3(su)->show port egress ge.1.1-3
 Port      Vlan           Egress     Registration      
Number      Id            Status       Status          
-------------------------------------------------------
ge.1.1       1            tagged       static          
ge.1.1      10           untagged      static          
ge.1.2       1            tagged       static          
ge.1.2      10           untagged      static          
ge.1.3       1            tagged       static          
ge.1.3      10           untagged      static 
set vlan forbidden
Use this command to prevent one or more ports from participating in a VLAN. This setting 
instructs the device to ignore dynamic requests (either through GVRP or dynamic egress) for the 
port to join the VLAN.
Syntax
set vlan forbidden vlan-id port-string 
Parameters
Defaults
None.
Mode
Switch command, read-write.
Example
This example shows you how to set ge.1.3 to forbidden for VLAN 6:
C3(su)->set vlan forbidden 6 ge.1.3
vlan-id Specifies the VLAN for which to set forbidden port(s).
port-string Specifies the port(s) to set as forbidden for the specified vlan-id.