After upgrading to RouterOS 7.20.1, I noticed abnormal VLAN behavior when using a bridge with vlan-filtering=yes.
On my setup (CCR2116), PPPoE discovery (PADI) frames started leaking between all VLANs configured on the same bridge — even though each VLAN was properly isolated. This caused multiple PPPoE connection attempts to appear in the log from the same MAC on different VLANs, showing messages like “connection from MAC already active”.
Downgrading back to 7.19 immediately resolved the issue: PADI frames stay within their correct VLAN and VLAN isolation works as expected again.
It seems to be a regression introduced in 7.20.1, possibly related to the new bridge hardware offload or fast-path VLAN filtering changes.
Hardware: CCR2116
Configuration affected: bridge with vlan-filtering=yes, multiple VLANs (11–16) on bridge, multiple PPPoE servers (one per VLAN).
Hopefully this can be reviewed and fixed in the next stable release.