There is considerable confusion as to what is meant by ‘private VLAN’, so let me clarify. Private VLANs are defined in RFC 5517 and are implemented on many brands of switches, most notably Cisco, so they are not unusual. It is possible to implement a private VLAN on MikroTik routers, but there’s a c...

Thanks. My question was aimed at which physical/virtual ports a router listened on. I've been trying to configure a router to send and receive VXLAN datagrams over a VRF. I can get it to send, but not receive. I've tried using the mangle to direct incoming datagrams from the VRF to the main routing ...

On which of its ports does a MikroTik router listen for incoming VXLAN connections?

Is there any way to control this?

Another release without full VRF functionality (as attested by posts from buset1974 and loloski above). I'm perplexed that we're up to a dot-four release, but there still appear to be chunks of L3 VPN functionality missing. These are not bugs; they are things that haven't even been implemented. Spec...

Applying an export filter to a VRF results in no routes being distributed.

I realize that MPLS L3VPNs in RouterOS 7 are still under development, but will it be possible to route VXLAN via a VRF using the mangle, e.g. /ip firewall mangle chain=output action=mark-routing new-routing-mark=VXLAN src-address=1.1.1.1 dst-address=2.2.2.2 where VXLAN is the name of the VRF and 1.1...

I confirm this behaviour on an RB2011. Setting the (interface/ethernet/switch/port) vlan-header parameter to leave-as-is yields the same results as add-if-missing: VLAN tags are not removed from outgoing packets that match a port's default-vlan-id. In addition, the (interface/ethernet/switch/vlan) i...

The standard is available at no cost through the IEEE GET Program: ieeexplore.ieee.org/browse/standards/get-program/page. SVL is useful for making a host (e.g. a server) accessible from multiple VLANs. Annex F provides the details. The server is not in a special VLAN, rather it is connected to a spe...

Setting vlan-filtering=yes for a bridge activates independent VLAN learning (IVL) so that each VLAN has a separate MAC address table. It's not possible to configure shared VLAN learning (SVL) so that the bridge has only one MAC address table for all VLANs. This means that it's not possible to config...

Do you require multiple VLANs on ports, or are you just trying to isolate groups of ports sharing a subnet within a layer 2 network? If so port isolation or bridge horizon may be a solution. Both: ports 2 and 3 on VLAN 2 are isolated from ports 4 and 5 on VLAN 3, but all ports have access to the br...

Hmmm, not sure I follow. SVL - Single forwarding database for all Vlans IVL - Forwarding Database for each vlan. Use IVL when you want same MAC address in each vlan, how does same subnet come into this? VLANs 2 and 3 share the subnet configured on the bridge. The hosts table shows the MAC addresses...

It would allow the configuation of asymmetric VLANs as described in Annex F of IEEE Std 802.1Q-2014. Now you got me intrigued. I can't find document containing the Annex you mentioned on line, so can you briefly describe how it's supposed to work? A simple example to demonstrate the concept. (This ...

Doesn't seem it is possible. Explanation of effects of setting vlan-filtering=yes in bridge manual explicitly states that setting this property changes bridge from SVL to IVL. What would you like to achieve by running bridge in SVL mode? It would allow the configuation of asymmetric VLANs as descri...

Is there any way of configuring shared VLAN learning (SVL) on a bridge that has vlan-filtering set to yes?

I notice that in 6.43rc34 the /interface bridge vlan untagged= configuration no longer strips all the C-tags from a packet with multiple C-tags. Instead it only strips the top C-tag. Will this be the case in the production version? If so, would it be possible to reinstate the former behaviour as an ...

I'm having exactly the same problem with hEX lites. The only thing I can think of that might be causing the problem is static discharges, but it seems extraordinary that Ethernet ports would be so fragile. (I can't imagine that they wouldn't have circuitry to protect against static discharges.) If t...

I've been having problems with failing Ethernet ports on hEX lites. I took one out the box this morning, configured it with the latest software (6.41.2), and one of the ports had failed by lunch time. About three or four hEX lites have failed on me like this. The problem manifests itself as a port L...

Is it possible to set the Network Address of Next Hop field in an MP_REACH_NLRI attribute to an IPv6 address for BGP-based VPLS?

If so, does this require a routing filter or is there a simpler way?

Good point.

However, as far as I am aware, GRE6 (/interface gre6) only supports routed tunnels (IP over IPv6), not bridged ones (Ethernet over IPv6): it lacks the tunnel-id attribute of EoIPv6.

I’ve been experimenting with EoIPv6 (/interface eoipv6) and noticed that it doesn’t use GRE like EoIP. It uses EtherIP (RFC 3378) instead. A few notes about this. 1. EtherIP is archaic. RFC 3378, dated September 2002, ‘… describes the EtherIP, an early tunneling protocol, to provide informational an...

Is there any way to use DHCP to configure a point-to-point link to a MikroTik router acting as a DHCP client? Specifically, is it possible to use DHCP to effect the following: ip address add address=20.1.1.1/32 interface=ether1 network=40.2.2.254 where ether1 is the interface on which the DHCP clien...