...
Code Block | ||
---|---|---|
| ||
/interface bridge add name=bridge1 frame-types=admit-only-vlan-tagged /interface bridge port add bridge=bridge1 interface=ether1 frame-types=admit-only-vlan-tagged add bridge=bridge1 interface=ether2 pvid=20 frame-types=admit-only-untagged-and-priority-tagged add bridge=bridge1 interface=ether3 pvid=30 frame-types=admit-only-untagged-and-priority-tagged /interface bridge vlan add bridge=bridge1 tagged=ether1 vlan-ids=20 add bridge=bridge1 tagged=ether1 vlan-ids=30 add bridge=bridge1 tagged=ether1,bridge1 vlan-ids=99 /interface vlan add interface=bridge1 vlan-id=99 name=MGMT /ip address add address=192.168.99.1/24 interface=MGMT /interface bridge set bridge1 vlan-filtering=yes |
More detailed examples can be found here.
Note |
---|
RTL8367, 88E6393X, 88E6191X and MT7621 switch chips can use HW offloaded vlan-filtering since RouterOS v7. |
Note |
---|
Bridge ports with |
More detailed examples can be found here.
CRS1xx/CRS2xx series switches
...
Warning |
---|
Not all devices with a switch chip are capable of VLAN switching on a hardware level, check the supported features for each switch chip, the compatibility table can be found Here. If a device has |
Note |
---|
On QCA8337 and Atheros8327 switch On QCA8337 and Atheros8327 switch chips, a default default |
...
Note |
---|
By default, the bridge interface is configured with protocol-mode set to with protocol-mode set to |
Note |
---|
For devices that have multiple switch chips (for example, RB2011, RB3011, RB1100), each switch chip is only able to switch VLAN traffic between ports that are on the same switch chip, VLAN filtering will not work on a hardware level between ports that are on different switch chips, this means you should not add all ports to a single bridge if you are intending to use VLAN filtering using the switch chip, VLANs between switch chips will not get filtered. You can connect a single cable between both switch chips to work around this hardware limitation, another option is to use Bridge use Bridge VLAN Filtering, but it disables hardware offloading (and lowers the total throughput). |
...