Just for info, the netPower Lite 7R is one of the CSS610 range - its full model name is CSS610-1Gi-7R-2S+OUTYou're referring to 2 different products:
CSS610
and
netPower Lite 7R
Forwarded to what address? This is different to the interface on their gateway being given a /48 subnet mask.They just forwarded to us /48 prefix.
That is only applicable to the implicit bridge-to-CPU port. Each port added under /interface bridge port has its own frame-types= setting.Actually, I have frame-types=admit-only-vlan-tagged set too, on the bridge.
Unlikely, there are very few use cases where a single VLAN-aware bridge cannot implement the configuration required.There are multiple methods to this "bridge + vlan filltering" or "interface-vlan + bridge"
You need the 2nd method to correctly work with your ISP.
So you have static routes on your clients sending the inter-VLAN traffic to the switch, separate from the default route to your OPNsense router?I try to purely get interVLAN routing working. Since I have NAT covered.
See viewtopic.php?p=992390#p992390The only thing I have noticed is that when you configure discovery on VLAN interfaces, it shows that as the interface rather than a physical one.