I’ve got MT’s all over the place being used as basic switches with all ports bridged together. All traffic is currently untagged. I’m trying to add a vlan2 to my network and it appears that my bridges are combining all the tagged and untagged traffic together because if I put my IPv6 DHCP server on vlan2 clients on the untagged LAN can still request a Prefix.
So, are bridge filters the only solution? Is there a simpler way to isolate the vlan traffic and the untagged traffic from each other?
I may not be the expert here on bridges in MT routers as I don’t use them at all. I use routers exclusively as routers and separate switches as switches, and never the twain shall cross.
However, if I understand bridging in the MT routers, you need to get each VLAN into a separate bridge. If a bridge has several VLANs connected to it, they will be able to talk to each other.
Someone who understands bridges better (actually uses them) may give a far better answer.
Sure, unless you have assigned ports especially to vlan2.
I think I was fighting a bug of some kind. With my initial testing I had an IPv6 DHCP server on an ether port with no vlan tagging. When I was ready to test it on VLAN2 I simply moved the IPv6 address and DHCP server to VLAN2. My clients were still receiving prefixes on the ethernet port, but not on vlan 2. Rebooting the server router fixed the behavior and now clients are only able to get an IP on vlan2.