For incoming frames:
- If the frame is untagged, the switch will give it an internal tag of VLAN1 while it decides how to switch it
- if the frame is tagged with a VLAN ID of 2-5, the frame will be accepted and the tag will remain
- if the frame is tagged with a VLAN ID *other* than 2-5, the frame will be dropped
For outgoing frames:
- a frame in VLAN1 will be sent out without any 802.1q tag in the header
- a frame in VLANs 2-5 will be sent out with an 802.1q tag in the header containing the VLAN ID
- a frame in any other VLAN will not be sent out.
You should not use VLAN1 nor any untagged VLANs on inter-switch links:
- stop using VLAN1, remove it from all links
- change the untagged VLAN on each link to VLAN999
- do not put any traffic on VLAN999