Wiki explains ports isolation setup for preventing rogue dhcp server. It is done in terms of ports. Now, suppose that CRS access ports are split between several VLANs, one (or several) ports are trunks to upstream, and DHCP servers for each VLANs are connected through the trunk. Would the same set up as in wiki work in this case ?
E.g., I have ports 1-12 in VLAN 1, 12-23 in VLAN 2, untagged. The trunk is port 24, where both VLAN 1 and 2 are tagged, and hosts running DHCP servers are on port 24. Does the following has a chance working ?
/interface ethernet switch
port set ether1 isolation-leakage-profile-override=2
...
port set ether23 isolation-leakage-profile-override=2
port-isolation add port-profile=2 protocol-type=dhcpv4 type=dst forwarding-type=bridged ports=ether24 registration-status="" traffic-type=""