CRS1xx/2xx Port Based VLAN question

RouterOS General
1

I am following the guide here with a simple Example 1 (Trunk and Access ports):
https://help.mikrotik.com/docs/pages/viewpage.action?pageId=103841836

My special requirement is:
I need to have incoming untagged traffic on the trunk port from and to undefined non-vlan (neither access or trunk) ports still forwarded, but when I follow the example and finally enable the unknown/invalid VLAN filtering, this traffic gets blocked.

Should I omit the trunk and undefined ports from the unknown/invalid VLAN filtering port definition? Or do I have to add vlan-id=0 or 1 somewhere?
I know that disabling VLAN filtering on CRS3xx breaks all VLAN functionality, hence the question.

2

Trunk and untagged is a bit of a contradiction.

Can you make a network diagram that contains your requirements?
Are you by any chance looking for hybrid ports?

3

Maybe, in most cases you would want to only accept tagged packets on the trunk port… but I need also the packets without VLAN header to be forwarded to the last port.
draw.png

4

In ROS parlance, port allowing both (one or several) tagged VLANs and untagged traffic is called hybrid port. You should assign VLAN ID to untagged frames on ingress and example how to do it is in this manual.