...
| Code Block |
|---|
|
/interface ethernet switch vlan
add ports=ether2,ether3 switch=switch1 vlan-id=400200
add ports=ether2,ether4 switch=switch1 vlan-id=300
add ports=ether2,ether5 switch=switch1 vlan-id=200400 |
Assign vlan-mode and vlan-header mode for each port and also default-vlan-id on ingress for each access port:
| Code Block |
|---|
|
/interface ethernet switch port
set ether2 vlan-mode=secure vlan-header=add-if-missing
set ether3 vlan-mode=secure vlan-header=always-strip default-vlan-id=400200
set ether4 vlan-mode=secure vlan-header=always-strip default-vlan-id=300
set ether5 vlan-mode=secure vlan-header=always-strip default-vlan-id=200400 |
- Setting
vlan-mode=secure ensures strict use of VLAN table. - Setting
vlan-header=always-strip for access ports removes VLAN header from frame when it leaves the switch chip. - Setting
vlan-header=add-if-missing for trunk port adds VLAN header to untagged frames. default-vlan-id specifies what VLAN ID is added for untagged ingress traffic of the access port.
...