Mikrotik docs on CRS series is a terable :lol: Maybe my config help to you little. /interface ethernet switch set drop-if-invalid-or-src-port-not-member-of-vlan-on-ports="SFP-10G,ether1-QRT2,ether2,ether3,ether4,ether5,ether6-34410A,ether7-MyPC,ether8-MyPC,ether9,ether10-Akip,ether11,ether12,et...