From 3a93ce1786185ae52b32248cc817d7e01f687dfb Mon Sep 17 00:00:00 2001
From: Erdnusschokolade <96622762+Erdnusschokolade@users.noreply.github.com>
Date: Sat, 23 May 2026 00:26:13 +0200
Subject: [PATCH] doc: document vlan <id> mgmt command

Adds CLI reference for the previously undocumented vlan <id> mgmt
command, including the disable case (vlan 0 mgmt), default state,
and a lockout warning.

Fixes #235
---
 doc/vlan.md | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/doc/vlan.md b/doc/vlan.md
index 902f4e6..a3d50c7 100644
--- a/doc/vlan.md
+++ b/doc/vlan.md
@@ -79,6 +79,12 @@ vlan <VLAN-ID> d
 vlan show
   Dumps the current ingress vlan settings.
 
+vlan <VLAN-ID> mgmt
+  Restricts network access to the switch (web UI, syslog) to the given
+  VLAN. Use `vlan 0 mgmt` to disable the filter. Default is `vlan 1 mgmt`.
+  Warning: setting this to an unreachable VLAN locks out the web UI;
+  recovery requires serial console.
+
 pvid <port> <VLAN-ID>
   assigns PVID to a port. ports are numbered as on the casing