Hi Guys
Hoping you can help clarify the correct way of achieving what we need on the RB2011L-RM with ROS 5.20.
I've kinda got it to work but I cannot get to my management interfaces on the default VLAN (untagged)
We have 4 VLANS, 13, 20, 100 and 101.
We also have untagged traffic, all our devices management interfaces are untagged.
ether2 must carry all the VLANS and the untagged traffic.
ether3 carries VLAN 13 and untagged traffic.
ether4 only carries VLANS 100 and 101
ether5 must carry VLANS 13, 20 and untagged traffic
ether6 untagged traffic only
Here is my current config.
# jan/02/1970 03:11:03 by RouterOS 5.20
# software id = VB2R-F3JP
#
/interface bridge
add admin-mac=00:00:00:00:00:00 ageing-time=5m arp=enabled auto-mac=yes \
disabled=no forward-delay=15s l2mtu=65535 max-message-age=20s mtu=1500 \
name=br-100 priority=0x8000 protocol-mode=none transmit-hold-count=6
add admin-mac=00:00:00:00:00:00 ageing-time=5m arp=enabled auto-mac=yes \
disabled=no forward-delay=15s l2mtu=65535 max-message-age=20s mtu=1500 \
name=br-101 priority=0x8000 protocol-mode=none transmit-hold-count=6
add admin-mac=00:00:00:00:00:00 ageing-time=5m arp=enabled auto-mac=yes \
disabled=no forward-delay=15s l2mtu=65535 max-message-age=20s mtu=1500 \
name=br-13 priority=0x8000 protocol-mode=none transmit-hold-count=6
add admin-mac=00:00:00:00:00:00 ageing-time=5m arp=enabled auto-mac=yes \
disabled=no forward-delay=15s l2mtu=65535 max-message-age=20s mtu=1500 \
name=br-20 priority=0x8000 protocol-mode=none transmit-hold-count=6
add admin-mac=00:00:00:00:00:00 ageing-time=5m arp=enabled auto-mac=yes \
disabled=no forward-delay=15s l2mtu=1598 max-message-age=20s mtu=1500 \
name=bridge-untagged priority=0x8000 protocol-mode=none \
transmit-hold-count=6
/interface vlan
add arp=enabled disabled=no interface=ether4 l2mtu=1594 mtu=1500 name=\
vlan-100.4 use-service-tag=no vlan-id=100
add arp=enabled disabled=no interface=ether4 l2mtu=1594 mtu=1500 name=\
vlan-101.4 use-service-tag=no vlan-id=101
add arp=enabled disabled=no interface=ether2 l2mtu=1594 mtu=1500 name=\
vlan-101.2 use-service-tag=no vlan-id=101
add arp=enabled disabled=no interface=ether2 l2mtu=1594 mtu=1500 name=\
vlan-100.2 use-service-tag=no vlan-id=100
add arp=enabled disabled=no interface=ether2 l2mtu=1594 mtu=1500 name=\
vlan-13.2 use-service-tag=no vlan-id=13
add arp=enabled disabled=no interface=ether5 l2mtu=1594 mtu=1500 name=\
vlan-13.5 use-service-tag=no vlan-id=13
add arp=enabled disabled=no interface=ether5 l2mtu=1594 mtu=1500 name=\
vlan-20.5 use-service-tag=no vlan-id=20
add arp=enabled disabled=no interface=ether2 l2mtu=1594 mtu=1500 name=\
vlan-20.2 use-service-tag=no vlan-id=20
/interface ethernet switch
set 0 mirror-source=none mirror-target=none name=switch1
set 1 mirror-source=none mirror-target=none name=switch2
/interface bridge port
add bridge=bridge-untagged disabled=no edge=auto external-fdb=auto horizon=\
none interface=ether2 path-cost=10 point-to-point=auto priority=0x80
add bridge=bridge-untagged disabled=no edge=auto external-fdb=auto horizon=\
none interface=ether3 path-cost=10 point-to-point=auto priority=0x80
add bridge=bridge-untagged disabled=no edge=auto external-fdb=auto horizon=\
none interface=ether4 path-cost=10 point-to-point=auto priority=0x80
add bridge=bridge-untagged disabled=no edge=auto external-fdb=auto horizon=\
none interface=ether5 path-cost=10 point-to-point=auto priority=0x80
add bridge=bridge-untagged disabled=no edge=auto external-fdb=auto horizon=\
none interface=ether6 path-cost=10 point-to-point=auto priority=0x80
add bridge=br-100 disabled=no edge=auto external-fdb=auto horizon=none \
interface=vlan-100.4 path-cost=10 point-to-point=auto priority=0x80
add bridge=br-100 disabled=no edge=auto external-fdb=auto horizon=none \
interface=vlan-100.2 path-cost=10 point-to-point=auto priority=0x80
add bridge=br-101 disabled=no edge=auto external-fdb=auto horizon=none \
interface=vlan-101.2 path-cost=10 point-to-point=auto priority=0x80
add bridge=br-101 disabled=no edge=auto external-fdb=auto horizon=none \
interface=vlan-101.4 path-cost=10 point-to-point=auto priority=0x80
add bridge=br-13 disabled=no edge=auto external-fdb=auto horizon=none \
interface=vlan-13.5 path-cost=10 point-to-point=auto priority=0x80
add bridge=br-13 disabled=no edge=auto external-fdb=auto horizon=none \
interface=vlan-13.2 path-cost=10 point-to-point=auto priority=0x80
add bridge=br-20 disabled=no edge=auto external-fdb=auto horizon=none \
interface=vlan-20.2 path-cost=10 point-to-point=auto priority=0x80
add bridge=br-20 disabled=no edge=auto external-fdb=auto horizon=none \
interface=vlan-20.5 path-cost=10 point-to-point=auto priority=0x80
add bridge=bridge-untagged disabled=no edge=auto external-fdb=auto horizon=\
none interface=ether1-gateway path-cost=10 point-to-point=auto priority=\
0x80
add bridge=bridge-untagged disabled=no edge=auto external-fdb=auto horizon=\
none interface=ether10 path-cost=10 point-to-point=auto priority=0x80
add bridge=bridge-untagged disabled=no edge=auto external-fdb=auto horizon=\
none interface=ether9 path-cost=10 point-to-point=auto priority=0x80
add bridge=bridge-untagged disabled=no edge=auto external-fdb=auto horizon=\
none interface=ether8 path-cost=10 point-to-point=auto priority=0x80
add bridge=bridge-untagged disabled=no edge=auto external-fdb=auto horizon=\
none interface=ether7 path-cost=10 point-to-point=auto priority=0x80
/interface bridge settings
set use-ip-firewall=no use-ip-firewall-for-pppoe=no use-ip-firewall-for-vlan=\
no
/interface ethernet switch port
set 0 vlan-header=leave-as-is vlan-mode=disabled
set 1 vlan-header=leave-as-is vlan-mode=disabled
set 2 vlan-header=leave-as-is vlan-mode=disabled
set 3 vlan-header=leave-as-is vlan-mode=disabled
set 4 vlan-header=leave-as-is vlan-mode=disabled
set 5 vlan-header=leave-as-is vlan-mode=disabled
set 6 vlan-header=leave-as-is vlan-mode=disabled
set 7 vlan-header=leave-as-is vlan-mode=disabled
set 8 vlan-header=leave-as-is vlan-mode=disabled
set 9 vlan-header=leave-as-is vlan-mode=disabled
set 10 vlan-header=leave-as-is vlan-mode=disabled
set 11 vlan-header=leave-as-is vlan-mode=disabled
/ip address
add address=172.20.1.101/16 disabled=no interface=ether6 network=172.20.0.0
add address=192.168.0.10/24 disabled=no interface=ether2 network=192.168.0.0
add address=192.168.0.16/24 disabled=no interface=bridge-untagged network=\
192.168.0.0
add address=172.20.1.103/16 disabled=no interface=vlan-20.2 network=\
172.20.0.0