Bridge and VLANs configuration

Hello guys,

do you have any idea why Bridge with VLAN configuration os not working? Please see my configuration.

ethernet 2-4 should be VLAN2
ethernet 5 should be trunk port with VLAN2 and VLAN3

I can’t obtain IP address.
config.rsc (1.7 KB)

A bridge has two distinct roles - both a switch connecting ports together, and an interface connecting bridge traffic to services (routing, DHCP, etc) on the Mikrotik itself.

You haven’t included the interface role in your bridge VLAN statements, so:
/interface bridge vlan
add bridge=bridge-LAN tagged=bridge-LAN,ether5 untagged=bridge-LAN vlan-ids=2
add bridge=bridge-LAN tagged=bridge-LAN,ether5 vlan-ids=3

Any untagged VLAN memberships are added dynamically based on the pvid= settings under /interface bridge port.

According to the bridge hw offload guide, that model doesn’t support Bridge VLAN filtering in HW offload. Have you tried the same config under the switch menu?

https://wiki.mikrotik.com/wiki/Manual:Interface/Bridge#Bridge_Hardware_Offloading

I have had a look,
it appears to me that you have ether1, not on the bridge doing its own thing, fine.
it appears to me that you have ether 5 setup as a trunk port on the ingress side “Bridge Port” (as you have both vlans2 and 3 running on this port) but
on the egress side “Bridge Vlan” you are attempting to provide a hybrid port. Assuming the attached device is like a smart VOIP device that can read the tagged information and direct it to the phone for example and the untagged data to an attached PC.

The correct config for that would be, in isolation.
/interface bridge vlan
add bridge=bridge-LAN tagged=bridge-LAN untagged=ether5 vlan-ids=2
add bridge=bridge-LAN tagged=bridge-LAN,ether5 vlan-ids=3

The other thing I would put in there although not 100% necessary is to identify the access ports on egress so its clear to the reader if nothing else.
add bridge=bridge-LAN tagged=bridge-LAN untagged=ether2,ether3,ether4 vlan-ids=2

Combining the above, this is what I would have on my config…
/interface bridge vlan
add bridge=bridge-LAN tagged=bridge-LAN,ether5 vlan-ids=3
add bridge=bridge-LAN tagged=bridge-LAN untagged=ether2,ether3,ether4,ether5 vlan-ids=2

Thanks a lot guys, it’s working now, perfect.

What did you do to resolve your issues??

Hi,

this resolve my issue:
/interface bridge vlan
add bridge=bridge-LAN tagged=bridge-LAN,ether5 vlan-ids=2
add bridge=bridge-LAN tagged=bridge-LAN,ether5 vlan-ids=3

It’s still quite hard to understand why bridge-LAN is tagged, but it’s working well.

I believe the bridge is tagged because the bridge is involved in routing traffic (L3) for that ether port?? Probably wrong but my guess.