Tue Feb 19, 2013 9:24 pm
Default l2mtu (about 1520 depending board) is enough to bridge standard packets with vlan headers.
You don't need to create vlan interfaces, but it could be handy to create one vlan interface connected to bridge for administration if your link do not accept untagged packets.
This works good if you do not have duplicate mac-addresses in your network or same mac address used in multiple vlans.
Bridge sees all mac-addresses as one lan (it don't differentiate them by vlan as managed switches) and in case of duplicate mac-addresses in different side of bridge it could cause packets to go wrong direction.
Other option is to differentiate vlans in ethernet port and use bridge per vlan. And then connect these bridges with eoip over wlan. This solution works even there are duplicate mac-addresses in diffrent vlans in diffrent side of link. This is basically same as wiki article about wds per vlan you have read.
Bad point is that sxt is only able to do eoip about 80 Mbit/s without firewall rules. So you may loose little speed.