Mikrotik Vlan issue in router OS7

RouterOS General
1

Hi all,

I’ve a Mikrotik setup with one of our clients who provide us with a tagged Vlan coming in for IPTV. We take this Vlan and untag it on another interface and this works, no problem.
However, when running Router OSv7, it no longer works. This was an earlier version of version 7 in released in May and then the latest build.
It hasn’t worked on either. I only discovered this when someone reported the TV not working and eventually rolled this back to v6.

Has anybody else come across this issue & does anybody know if this might be a bug or if Mikrotik’s way of untagging Vlans has changed at all?

2

Most probably it’s due to configuration error. Post text export of config (at least the /interface configuration subtree) so we can have a look.

3

Hi,

Thanks for the reply. So these are the two relevant pieces of info from the config. Let me know if you need more. As said, this is working in Router OS6 but not in v7


/interface bridge port
add bridge=RawInternet comment=“IPTV - ISP tagged Vlan 4021 > Untagged Eth1”
interface=ether1-TV pvid=4021

interface bridge vlan
add bridge=RawInternet comment=“IPTV VLan” tagged=ether12-ISP untagged=
ether1-TV vlan-ids=4021
add bridge=RawInternet vlan-ids=1

4

Well, if that’s the only relevant config, then I’m very, very surprised that it worked in v6. IMO this is far from being everything that counts. I asked for complete export of /interface … if you know better, then …

5

I meant what specifically pertained to tagged untagged Vlan provided via the ISP.

Here’s all interfaces

interface bridge

add name=Internet-Bridge
add name=Video-Bridge
add name=Raw vlan-filtering=yes
add name=PC-Bridge
/interface ethernet
set [ find default-name=ether1 ] name=ether1-TV
set [ find default-name=ether3 ] name="ether3
set [ find default-name=ether6 ] name=ether6
set [ find default-name=ether7 ] name=ether7
set [ find default-name=ether8 ] name=ether8
set [ find default-name=ether9 ] name=ether9
set [ find default-name=ether10 ] name=ether10-Mgmt
set [ find default-name=ether11 ] name=ether11
set [ find default-name=ether12 ] name=ether12-ISP
set [ find default-name=ether13 ] name=ether13-Trunk

/interface vlan

add interface=ether13-Trunk name=Internet_VLan_20 vlan-id=20
add interface=ether13-Trunk name=PC_VLan_100 vlan-id=100
/interface ethernet switch port
set 0 default-vlan-id=0
set 1 default-vlan-id=0
set 2 default-vlan-id=0
set 3 default-vlan-id=0
set 4 default-vlan-id=0
set 5 default-vlan-id=0
set 6 default-vlan-id=0
set 7 default-vlan-id=0
set 8 default-vlan-id=0
set 9 default-vlan-id=0
set 10 default-vlan-id=0
set 11 default-vlan-id=0
set 12 default-vlan-id=0
set 13 default-vlan-id=0
set 14 default-vlan-id=0
set 15 default-vlan-id=0
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik

/interface bridge port
add bridge=Raw comment=“IPTV - ISP tagged Vlan 4021 > Untagged Eth1”
interface=ether1-TV pvid=4021
add bridge=Internet-Bridge interface=ether13-Trunk
add bridge=Internet-Bridge interface=ether2 pvid=100
add bridge=Raw interface=ether12-ISP
add bridge=Internet-Bridge interface=ether8-PI
add bridge=PC-Bridge ingress-filtering=yes interface=PC_VLan_100
add bridge=Internet-Bridge ingress-filtering=yes interface=Internet_VLan_20
add bridge=Video-Bridge ingress-filtering=yes interface=ether7
add bridge=Video-Bridge ingress-filtering=yes interface=ether6
add bridge=Internet-Bridge interface=ether9
/interface bridge vlan
add bridge=Raw comment=“IPTV VLan” tagged=ether12-ISP untagged=
ether1-TV vlan-ids=4021
add bridge=RawInternet vlan-ids=1

6

Well, configuring VLANs in a manner where there’s one bridge per VLAN is obsolete. You should re-do the configuration conforming to single-vlan-enabled-bridge. Have a good look at this tutorial, it shows how it should be done.

And one thing that definitely is not correct: internet bridge doesn’t have vlan-filtering enabled, but ether2 has PVID set … pvid property is ignored if bridge doesn’t have vlan-filtering enabled.