Bridge Port- Edge=Yes still sends PDUs! :(

joshhboss · December 30, 2022, 11:36pm

Basically what is happening in this post.. that was never resolved is happening to me http://forum.mikrotik.com/t/stop-mt-triggering-cisco-bpdu-guard/93480/1

I have the internet comming from a Cisco 3750 and the port is just set as

Switchport mode access
Switchport access vl 170..

Now when I connect it to my switch.. CRS328-4C-20S-4S+RM I connect it trying to receive the Internet an give it my own tag (untagged).1701.. So this is how my ports are configured.

/interface bridge
add admin-mac=XXNXNXNXNXNX auto-mac=no comment=defconf dhcp-snooping=yes name=bridge vlan-filtering=yes
/interface bridge port
add bridge=bridge comment=defconf edge=yes frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=yes interface=combo1 pvid=1701 trusted=yes
add bridge=bridge comment=defconf edge=yes frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=yes interface=combo2 pvid=1701 trusted=yes

and my vlans like this.. Ill post the whole thing..but just to show that I have nothing tagged on those ports.. combo1 and combo2

/interface bridge vlan
add bridge=bridge tagged=bridge,bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 untagged=combo4 vlan-ids=200
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=10
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=30
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=40
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=50
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=60
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=69
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=70
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=79
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=80
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=89
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=90
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=100
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=110
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=130
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=140
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=150
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=160
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=169
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=170
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=179
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=180
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=189
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=190
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=192
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=210
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=230
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=240
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=250
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=260
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=269
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=270
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=280
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=289
add bridge=bridge tagged=bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9,sfp10,sfp11,sfp12,sfp13,sfp14,sfp15,sfp16,sfp17,sfp18,sfp19,sfp20 vlan-ids=290
add bridge=bridge vlan-ids=400
add bridge=bridge vlan-ids=401
add bridge=bridge vlan-ids=600
add bridge=bridge vlan-ids=601
add bridge=bridge tagged=bonding1 untagged=combo1,combo2 vlan-ids=1701
add bridge=bridge vlan-ids=1702
add bridge=bridge vlan-ids=1703
add bridge=bridge tagged=bridge,bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9 vlan-ids=12
add bridge=bridge tagged=bridge,bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9 vlan-ids=32
add bridge=bridge tagged=bridge,bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9 vlan-ids=42
add bridge=bridge tagged=bridge,bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9 vlan-ids=52
add bridge=bridge tagged=bridge,bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9 vlan-ids=62
add bridge=bridge tagged=bridge,bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9 vlan-ids=65
add bridge=bridge tagged=bridge,bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9 vlan-ids=72
add bridge=bridge tagged=bridge,bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9 vlan-ids=82
add bridge=bridge tagged=bridge,bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9 vlan-ids=92
add bridge=bridge tagged=bridge,bonding1,bonding2,bonding3,bonding4,sfp-sfpplus1,sfp9 vlan-ids=102
add bridge=bridge vlan-ids=162

how the moment I try and tag the VLAN 1701, Incase I want to pass the publics straight through layer 2 to switches i have running below the CRS328 that will also be cisco 2960s.. the Internet Cisco switch then responses like this..

Dec 30 18:12:59.902 EST: %SPANTREE-7-RECV_1Q_NON_TRUNK: Received 802.1Q BPDU on non trunk GigabitEthernet1/0/26 VLAN170.
Dec 30 18:12:59.902 EST: %SPANTREE-7-BLOCK_PORT_TYPE: Blocking GigabitEthernet1/0/26 on VLAN0170. Inconsistent port type.

Now BPDU filter enable on the Cisco switch helps but I dont always have control of the switch handing me the internet and I was under the assumption that edge would no longer send BPDUs. That is apparently not the case. HELP!!!

Please and thank you.. also im on the latest stable version of ROS on CRS..

Thank you!!

joshhboss · December 31, 2022, 2:31am

I did try the switch rules in the documentation and the bridge filter rules.. they did not help.. also I dont know if they would break hardware offloading, or just not working right if they aren’t hitting the CPU.. either way this is rough.. all im trying to do is take a vlan untagged.. tag it and keep it moving, it just so happens to be the internet vlan.

Just need to stop BPDUs.

joshhboss · December 31, 2022, 2:40am

Just disabled hardware off load on that port and it seems to work.. Does hardware offload disable edge=yes.. that would suck.. or what other functions of spanning tree configurations?

joshhboss · January 1, 2023, 10:54pm

Hardware offload breaks edge=yes apparently ..