ASK [Love-Vlans :)]

RouterOS General
1

i got simple config.
My question is whether is the right way to do tag/untag one single interface.
I’m delivering vlans over the wireless link and i want to be untag-21 vlan at the AP—St and tag vlan-2 at the equipments connected to the Station.
I got this working, just i’m wondering whether is the right way or not

/interface bridge
add name=br-vlan priority=0x6000 vlan-filtering=yes
/interface bridge port
add bridge=br-vlan interface=ether2 pvid=22
/interface bridge vlan
add bridge=br-vlan tagged=br-vlan,ether2 vlan-ids=2
add bridge=br-vlan tagged=br-vlan,ether2 vlan-ids=200,201
add bridge=br-vlan tagged=br-vlan untagged=ether2 vlan-ids=22

wireless-vlans.PNG

2

Looks okay to me, Ether two going to the antenna is setup as a hybrid port, BUT WHY?
What device (antenna) needs an untagged port to it (ubiquiti?)

You could combine… and vlan22 does not need to be tagged at the bridge…
/interface bridge vlan
add bridge=br-vlan tagged=br-vlan,ether2 vlan-ids=2,200,201
add bridge=br-vlan untagged=ether2 vlan-ids=22

Theoretically untags are assigned dynamically and thus need not be manually inserted into the bridge vlans (although I prefer to see them myself)
thus this would work as well.
/interface bridge vlan
add bridge=br-vlan tagged=br-vlan,ether2 vlan-ids=2,200,201

3

Thanks @anav

imagine that is all MT, even with the ubiquiti would be the same story.
I want to be hybrid port because i want to untag at the wireless equipments (all of them).

The antennas will be only bridge i don’t want to assign any vlan on them

With the taget port i will to diveret diferent service to the clients, such as pppoe, voip,ftp..and so on.

so i can go ahead with my (corrected) config.

4

Hi Nichy, in that case ETHER2 should not carry any other vlans, just needs to be an access port ???

5

You untag the packets from the vlan on the port going to the antennas.
So why do you have vlans 2,200 and 201 going on ether2 to the antennas???

6

So the topology where is simple,
Basicly 10.0.2.2 is the switch, then i got another router and another wireless link.

So vl-22 is /28 (means, got more wireless antennas)

vl-2 is the management vlan(at all routers i ll be using vlan filtering)
vl -200 and 201 would be for pppoe

7

Okay so if it was all MT devices, it would be trunk ports to all of them,
The vlan2 would be for management purposes and all devices would get an IP on the management vlan.
The other vlan would be the one data vlan which would stay within the trunks until coming out the other end to a dubm device there at the appropriate junction.
That way you can use winbox to access and config every device up to and including the antenna on this side.

IF you do not have a router at the other end, then the antennas also include vlan2 on the trunk and it goes along with data to the other antenna and the far antenna and devices any smart MT devices on the far end also get an IP on the management vlan… In this manner you could on winbox access every device on the network for config purposes.

So its not clear exactly what is going on but hope that helps…

8

i was worry about whether is a proper way to use hybrid port.
As far as i can understand , we come to conclusion that i can use it.
Mikrotik allows that for vlan filtering.
So the rest of would be easy, for me to fix everything up

9

assuming ether2 is the downlink, you seem to be missing uplink in bridge port/vlan config