RB750 RouterOS v6.32.3.
Working scheme such:
/interface bridge
add name=bridge_trunk
add name=bridge_vlan1
add name=bridge_vlan10
add name=bridge_vlan55
/interface ethernet
set [ find default-name=ether1 ] name=WAN
set [ find default-name=ether2 ] name=LAN
set [ find default-name=ether3 ] name=ether3-slave-local
set [ find default-name=ether4 ] name=ether4-slave-local
set [ find default-name=ether5 ] name=ether5-slave-local
/interface vlan
add interface=bridge_trunk l2mtu=1594 name=vlan1_tag vlan-id=1
add interface=bridge_trunk l2mtu=1594 name=vlan10_tag vlan-id=10
add interface=bridge_trunk l2mtu=1594 name=vlan55_tag vlan-id=55
/interface bridge port
add bridge=bridge_trunk interface=LAN
add bridge=bridge_vlan1 interface=vlan1_tag
add bridge=bridge_vlan55 interface=vlan55_tag
add bridge=bridge_vlan1 interface=ether3-slave-local
add bridge=bridge_vlan1 interface=ether4-slave-local
add bridge=bridge_vlan55 interface=ether5-slave-local
add bridge=bridge_vlan10 interface=vlan10_tag
/ip address
add address=192.168.111.226/27 interface=vlan10_tag network=192.168.111.224
/ip firewall mangle
add action=mark-routing chain=prerouting log-prefix=MARK_VLAN10 new-routing-mark=VLAN10 src-address=192.168.111.224/27
add action=mark-routing chain=prerouting dst-address=192.168.111.224/27 log-prefix=MARK_VLAN10 new-routing-mark=VLAN10
/ip route
add distance=1 gateway=192.168.111.225 routing-mark=VLAN10
/ip route rule
add src-address=192.168.111.224/27 table=VLAN10
By operation of MikroTik Neighbor Discovery protocol on VLAN 10, I found that in a chain of postrouting of the table Mangle FIREWALL the counter of packets twice
it is more than in output chain, and thus the counter of packets of chains of prerouting and input increases. I redirected packets of chains of prerouting and input on action of “sniff TZSP”
on Wireshark also it appeared that it is MNDP packets from the same router. Logging of packets in the tables Mangle FIREWALL and Bridge I showed that movement of packets
output → postrouting → prerouting → input → postrouting - > output bridge 2 packets. I used / tool sniffer filter-ip-address=ip router with redirection on Wireshark. Analysis /tool sniffer
I showed that the last packet goes from the address 129.0.0.10 on IP 192.168.111.226 through bridge_trunk, and in Wireshark shows that at the last packet
Ethernet frame check sequence incorrect, but src:192.168.111.226:5678 dst: 255.255.255.255:5678.
Help please why quite so packets pass in route.
As I imagined the scenario such:
LOCAL OUT → vlan10_tag (bridge_vlan10) → bridge_trunk → LAN
http://wiki.mikrotik.com/wiki/Manual:Packet_Flow_v6