ip igmpsnoop enable
ip route drop 192.168.1.0/24

sys sw vlan type 802.1q
sys sw vlan1q svlan setentry MNGT 248 25 fixed tag
sys sw vlan1q svlan setentry default 1 25 fixed untag
sys sw vlan1q svlan cpu 248
sys sw vlan1q svlan active 248

sys sw vlan1q svlan setentry MNGT 248 1 forbidden tag
sys sw vlan1q svlan setentry MNGT 248 2 forbidden tag
sys sw vlan1q svlan setentry MNGT 248 3 forbidden tag
sys sw vlan1q svlan setentry MNGT 248 4 forbidden tag
sys sw vlan1q svlan setentry MNGT 248 5 forbidden tag
sys sw vlan1q svlan setentry MNGT 248 6 forbidden tag
sys sw vlan1q svlan setentry MNGT 248 7 forbidden tag
sys sw vlan1q svlan setentry MNGT 248 8 forbidden tag
sys sw vlan1q svlan setentry MNGT 248 9 forbidden tag
sys sw vlan1q svlan setentry MNGT 248 10 forbidden tag
sys sw vlan1q svlan setentry MNGT 248 11 forbidden tag
sys sw vlan1q svlan setentry MNGT 248 12 forbidden tag
sys sw vlan1q svlan setentry MNGT 248 13 forbidden tag
sys sw vlan1q svlan setentry MNGT 248 14 forbidden tag
sys sw vlan1q svlan setentry MNGT 248 15 forbidden tag
sys sw vlan1q svlan setentry MNGT 248 16 forbidden tag
sys sw vlan1q svlan setentry MNGT 248 17 forbidden tag
sys sw vlan1q svlan setentry MNGT 248 18 forbidden tag
sys sw vlan1q svlan setentry MNGT 248 19 forbidden tag
sys sw vlan1q svlan setentry MNGT 248 20 forbidden tag
sys sw vlan1q svlan setentry MNGT 248 21 forbidden tag
sys sw vlan1q svlan setentry MNGT 248 22 forbidden tag
sys sw vlan1q svlan setentry MNGT 248 23 forbidden tag
sys sw vlan1q svlan setentry MNGT 248 24 forbidden tag
ip dhcp swif0 mode client
config save