CRS and vlan untagged port, again

RouterOS General
1

Hi,
It is several hours that I am trying to make an untagged port working on my CRS.
Yes I have read and followed forum and documentation.
I have a direct question: I see that CRS creates dynamic vlans, is it normal?
I see also this in ingress vlan translation:

 0   ports=ether18-slave-nas service-vlan-format=any customer-vlan-format=any new-customer-vid=4000 pcp-propagation=no sa-learning=yes 

 1 D ports=ether18-slave-nas,ether19-master-kvm,ether20-slave-kvm,ether21-slave-kvm,ether22-slave-kvm,ether23-slave-kvm,ether24-slave-kvm service-vlan-format=any customer-vlan-format=any new-customer-vid=4091 pcp-propagation=no 
     sa-learning=yes 

 2 D ports=ether2-modem service-vlan-format=any customer-vlan-format=any new-customer-vid=4095 pcp-propagation=no sa-learning=no

The switch creates a rule for vlan 4091 and it puts in its rule my ether18 port so I suppose that my rule is overwritten by that rule.

Is it possible?

Where is documentation about dynamic vlans?

Thanks,
Mario

2

I think those dynamic VLANs occur when setting up the master port. I also can’t get the untagged ports to work. I posted in a different thread that I am seeing the untagged port in reality be tagged based on a packet capture.

3

Infact I can understand that the router creates a dynamic vlan for my wan port (eth2-master). But I must have a way to exclude the untagged port from automatic inclusion in a dynamic vlan.

I have seen also you thread but I have no solution.

We need AN OFFICIAL REPLY!

Mario

4

Mario,

Not sure if my post here will be of help to you:
http://forum.mikrotik.com/t/basic-inter-vlan-routing-not-working/95580/14

Basically to get rid of those Dynamic VLANs, use only ONE master port.

5

maybe this can help

http://forum.mikrotik.com/t/swithing-without-master-port/95495/10

from another topic this tip can help:

when setting ingress vlan (untagged vlan of the port) be sure to include that “0”
example
/interface ethernet switch ingress-vlan-translation
add customer-vid=0 new-customer-vid=20 ports=ether03 sa-learning=yes

without that “0” tagged vlans on the port will not work

also check the unicast forwarding database to confirm vlan behavior