I started my Mikrotik journey in July of this year by introducing a RB4011 into a small business. My networking friends tried to discourage me from using the equipment by recommending other vendor that they felt were less complicated. You have to know your SH*&% to work with Mikrotik was their criti…

I’ve tagging this entry as a final answer to conclude this post on Implementing a VLAN Solution. I have a reached a milestone of discovery that I needed. The project is by no means complete. I will be taking what I have learned and begin to apply it. I suspect I will return as I begin to know more o…

bridge was there from a default configuration with .88 and bridge_vlan I made to get off .88. Nothing to do with the vlan’ing.

As I see it, you have now three bridges on the RB750GR3: bridge <- with ONLY ether2 in it bridge_LAN <- with ONLY ether3 in it bridge_VLAN <- with ether4 and ether5 in it The usual recommendation is to have only one bridge on a device, though it is not strictly mandatory, i.e. you can have more …

Just for the record (for potential readers with less ROS experience): bridges with single port can be useful in certain cases (e.g. to provide bridge filtering capabilities to that single port, can help with migration of L3 setup to another physical port without too much downtime by temporarily addi…

Thanks for sharing your insight. My intent was not to discourage use of the VLAN Interface. I initially configured one trunk port using this method to discover I couldn’t add another trunk port. I would like to swim in the pool that can trade-offs like performance but I new to these water. You have…

I didn’t want .88 in my home network since the subnet is already used. My initial foray was to create the bridge_LAN with a different subnet assignment and move all interfaces to that new subnet. I’m reluctant to remove MikroTik default configurations because of lack of experience. I typically just …

You should check this: [image] Once and for all COMPLETE Offbridge Port setup Useful user articles Current (still experimental) version : (fourth revision, 8th August 2025, but noone protested in the last few days, so ...) As recommended by Rule #7: The twel…

I continue to discover ways to lock myself out. My production router has an offbridge interface that I have tested and hope never to use. My dev_lab router lockout was an augh-sh&^% configuration change that left me thinking as I hit enter, that I might lock myself out with this change. OH well, I q…

[image] mkx: bridges with single port can be useful in certain cases (e.g. to provide bridge filtering capabilities to that single port, can help with migration of L3 setup to another physical port without too much downtime by temporarily adding another port, etc.). But yes, they do introduce s…

VLAN 1 is used by default by Mikrotik, this it NOT normally evident because - being a default - is not normally shown in exports (you need to make an export "verbose" to see it and how it is used on interfaces and bridges), fiddling with it (unless you really-really know where your towel is) is a p…

[image] colporteur: I have a nagging question about PVID1 and what if anything I should do to secure it? I have not used ID 1 in my schema. I recall best practice note on that. Looking at different resources there seems to be a bogeyman concern around this VLAN. LIke to feel I’ve done it right b…

Implementing a VLAN solution

RouterOS General

jaclaz January 11, 2026, 5:23pm 34

You should check this:

skip through first post (the "normal" way) and go to second post (using VLANs).