My lab enviroment:
port2: untagged 2012
port3: untagged 2013
port4: untagged 2014
port24: trunk port: untagged 2012 and tagged 2013,2014
Test unicast packet will isolate correct on port 2 , 3 , 4
Test broadcast packet will NOT isolate on port 2 , 3, 4
Because I sniffer by WireShark from port 2, but captured the port 3 and port 4 broadcast packet , why?
The config:
/interface ethernet
set [ find default-name=ether2 ] master-port=ether24
set [ find default-name=ether3 ] master-port=ether24
set [ find default-name=ether4 ] master-port=ether24
/interface ethernet switch
set bridge-type=customer-vlan-bridge
/interface ethernet switch egress-vlan-translation
add customer-vid=2012 new-customer-vid=0 port=ether2
add customer-vid=2013 new-customer-vid=0 port=ether3
add customer-vid=2014 new-customer-vid=0 port=ether4
/interface ethernet switch ingress-vlan-translation
add customer-vid=0 new-customer-vid=2012 port=ether2 sa-learning=yes
add customer-vid=0 new-customer-vid=2013 port=ether3 sa-learning=yes
add customer-vid=0 new-customer-vid=2014 port=ether4 sa-learning=yes