Question related to "RouterOS bridge mysteries explained"

Some examples of what ROS as of 7.19.6 allows, that it should not.

  1. Allows creating vlan interface under bridge for same vlan as the bridge's pvid
  2. Allows changing bridges pvid to a vlan that there already exists a vlan interface on the bridge.
[demo@MikroTik] > interface/export 
# 2025-10-11 20:01:08 by RouterOS 7.19.6
# software id = ****-****
#
# model = RB760iGS
# serial number = ************
/interface bridge
add admin-mac=DC:2B:AD:4D:EC:F2 auto-mac=no name=bridge vlan-filtering=yes
/interface vlan
add interface=bridge name=br.200 vlan-id=200
add interface=bridge name=br.210 vlan-id=210
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface bridge port
add bridge=bridge comment=defconf interface=ether2 pvid=200
add bridge=bridge comment=defconf interface=ether3 pvid=200
add bridge=bridge comment=defconf interface=ether4 pvid=199
add bridge=bridge comment=defconf interface=ether5 pvid=210
add bridge=bridge comment=defconf interface=sfp1
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
add interface=br.200 list=LAN
add interface=br.210 list=LAN
[demo@MikroTik] > interface p   
ppp-client     ppp-server     pppoe-client     pppoe-server     pptp-client     pptp-server     print   
[demo@MikroTik] > interface pr
Flags: R - RUNNING; S - SLAVE
Columns: NAME, TYPE, ACTUAL-MTU, L2MTU, MAX-L2MTU, MAC-ADDRESS
#    NAME    TYPE      ACTUAL-MTU  L2MTU  MAX-L2MTU  MAC-ADDRESS      
0 R  ether1  ether           1500   1596       2026  DC:2B:AD:4D:EC:F1
1 RS ether2  ether           1500   1596       2026  DC:2B:AD:4D:EC:F2
2  S ether3  ether           1500   1596       2026  DC:2B:AD:4D:EC:F3
3  S ether4  ether           1500   1596       2026  DC:2B:AD:4D:EC:F4
4 RS ether5  ether           1500   1596       2026  DC:2B:AD:4D:EC:F5
5  S sfp1    ether           1500   1596       2026  DC:2B:AD:4D:EC:F6
6 R  br.200  vlan            1500   1592             DC:2B:AD:4D:EC:F2
7 R  br.210  vlan            1500   1592             DC:2B:AD:4D:EC:F2
8 R  bridge  bridge          1500   1596             DC:2B:AD:4D:EC:F2
9 R  lo      loopback       65536                    00:00:00:00:00:00
[demo@MikroTik] > interface bridge/pri
Flags: D - dynamic; X - disabled, R - running 
 0  R name="bridge" mtu=auto actual-mtu=1500 l2mtu=1596 arp=enabled arp-timeout=auto mac-address=DC:2B:AD:4D:EC:F2 protocol-mode=rstp fast-forward=yes 
      igmp-snooping=no auto-mac=no admin-mac=DC:2B:AD:4D:EC:F2 ageing-time=5m priority=0x8000 max-message-age=20s forward-delay=15s transmit-hold-count=6 
      vlan-filtering=yes ether-type=0x8100 pvid=1 frame-types=admit-all ingress-filtering=yes dhcp-snooping=no port-cost-mode=long mvrp=no 
      max-learned-entries=auto 
[demo@MikroTik] > interface bridge/vlan print 
Flags: D - DYNAMIC
Columns: BRIDGE, VLAN-IDS, CURRENT-TAGGED, CURRENT-UNTAGGED
#   BRIDGE  VLAN-IDS  CURRENT-TAGGED  CURRENT-UNTAGGED
;;; added by vlan on bridge
0 D bridge       200  bridge                          
                 210                                  
;;; added by pvid
1 D bridge       200                  ether2          
;;; added by pvid
2 D bridge         1                  bridge          
;;; added by pvid
3 D bridge       210                  ether5          
[demo@MikroTik] > # what ROS shouldn't allow
[demo@MikroTik] > interface vlan add interface=bridge vlan-id=1 name=br.1      
[demo@MikroTik] > interface export
# 2025-10-11 20:05:11 by RouterOS 7.19.6
# software id = ****-****
#
# model = RB760iGS
# serial number = ************
/interface bridge
add admin-mac=DC:2B:AD:4D:EC:F2 auto-mac=no name=bridge vlan-filtering=yes
/interface vlan
add interface=bridge name=br.200 vlan-id=200
add interface=bridge name=br.210 vlan-id=210
add interface=bridge name=br.1 vlan-id=1
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface bridge port
add bridge=bridge comment=defconf interface=ether2 pvid=200
add bridge=bridge comment=defconf interface=ether3 pvid=200
add bridge=bridge comment=defconf interface=ether4 pvid=199
add bridge=bridge comment=defconf interface=ether5 pvid=210
add bridge=bridge comment=defconf interface=sfp1
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
add interface=br.200 list=LAN
add interface=br.210 list=LAN
[demo@MikroTik] > interface print                                              
Flags: R - RUNNING; S - SLAVE
Columns: NAME, TYPE, ACTUAL-MTU, L2MTU, MAX-L2MTU, MAC-ADDRESS
 #    NAME        TYPE      ACTUAL-MTU  L2MTU  MAX-L2MTU  MAC-ADDRESS      
 0 R  ether1      ether           1500   1596       2026  DC:2B:AD:4D:EC:F1
 1 RS ether2      ether           1500   1596       2026  DC:2B:AD:4D:EC:F2
 2  S ether3      ether           1500   1596       2026  DC:2B:AD:4D:EC:F3
 3  S ether4      ether           1500   1596       2026  DC:2B:AD:4D:EC:F4
 4 RS ether5      ether           1500   1596       2026  DC:2B:AD:4D:EC:F5
 5  S sfp1        ether           1500   1596       2026  DC:2B:AD:4D:EC:F6
 6 R  br.200      vlan            1500   1592             DC:2B:AD:4D:EC:F2
 7 R  br.210      vlan            1500   1592             DC:2B:AD:4D:EC:F2
 8 R  bridge      bridge          1500   1596             DC:2B:AD:4D:EC:F2
 9 R  lo          loopback       65536                    00:00:00:00:00:00
10 R  br.1        vlan            1500   1592             DC:2B:AD:4D:EC:F2
[demo@MikroTik] > interface bridge/vlan print                                  
Flags: D - DYNAMIC
Columns: BRIDGE, VLAN-IDS, CURRENT-TAGGED, CURRENT-UNTAGGED
#   BRIDGE  VLAN-IDS  CURRENT-TAGGED  CURRENT-UNTAGGED
;;; added by vlan on bridge
0 D bridge         1  bridge                          
                 200                                  
                 210                                  
;;; added by pvid
1 D bridge       200                  ether2          
;;; added by pvid
2 D bridge       210                  ether5          
[demo@MikroTik] > interface bridge print
Flags: D - dynamic; X - disabled, R - running 
 0  R name="bridge" mtu=auto actual-mtu=1500 l2mtu=1596 arp=enabled arp-timeout=auto mac-address=DC:2B:AD:4D:EC:F2 protocol-mode=rstp fast-forward=yes 
      igmp-snooping=no auto-mac=no admin-mac=DC:2B:AD:4D:EC:F2 ageing-time=5m priority=0x8000 max-message-age=20s forward-delay=15s transmit-hold-count=6 
      vlan-filtering=yes ether-type=0x8100 pvid=1 frame-types=admit-all ingress-filtering=yes dhcp-snooping=no port-cost-mode=long mvrp=no 
      max-learned-entries=auto 
[demo@MikroTik] > interface vlan print
Flags: R - RUNNING
Columns: NAME, MTU, ARP, VLAN-ID, INTERFACE
#   NAME         MTU  ARP      VLAN-ID  INTERFACE
0 R br.200      1500  enabled      200  bridge   
1 R br.210      1500  enabled      210  bridge   
2 R br.1        1500  enabled        1  bridge   
[demo@MikroTik] > interface vlan remove br.1      
[demo@MikroTik] > interface vlan print            
Flags: R - RUNNING
Columns: NAME, MTU, ARP, VLAN-ID, INTERFACE
#   NAME     MTU  ARP      VLAN-ID  INTERFACE
0 R br.200  1500  enabled      200  bridge   
1 R br.210  1500  enabled      210  bridge   
[demo@MikroTik] > # now change pvid of bridge from 1 to 199
[demo@MikroTik] > interface bridge set bridge pvid=199 
[demo@MikroTik] > interface bridge print                   
Flags: D - dynamic; X - disabled, R - running 
 0  R name="bridge" mtu=auto actual-mtu=1500 l2mtu=1596 arp=enabled arp-timeout=auto mac-address=DC:2B:AD:4D:EC:F2 protocol-mode=rstp fast-forward=yes 
      igmp-snooping=no auto-mac=no admin-mac=DC:2B:AD:4D:EC:F2 ageing-time=5m priority=0x8000 max-message-age=20s forward-delay=15s transmit-hold-count=6 
      vlan-filtering=yes ether-type=0x8100 pvid=199 frame-types=admit-all ingress-filtering=yes dhcp-snooping=no port-cost-mode=long mvrp=no 
      max-learned-entries=auto 
[demo@MikroTik] > # ROS shouldn't let us create a vlan interface on bridge with the same vlan-id as the bridge pvid          
[demo@MikroTik] > interface export
# 2025-10-11 20:13:36 by RouterOS 7.19.6
# software id = ****-****
#
# model = RB760iGS
# serial number = ************
/interface bridge
add admin-mac=DC:2B:AD:4D:EC:F2 auto-mac=no name=bridge pvid=199 vlan-filtering=yes
/interface vlan
add interface=bridge name=br.200 vlan-id=200
add interface=bridge name=br.210 vlan-id=210
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface bridge port
add bridge=bridge comment=defconf interface=ether2 pvid=200
add bridge=bridge comment=defconf interface=ether3 pvid=200
add bridge=bridge comment=defconf interface=ether4 pvid=199
add bridge=bridge comment=defconf interface=ether5 pvid=210
add bridge=bridge comment=defconf interface=sfp1
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
add interface=br.200 list=LAN
add interface=br.210 list=LAN
[demo@MikroTik] > interface vlan add interface=bridge name=br.199 vlan-id=199 comment="Should not be allowed when bridge pvid=199"
[demo@MikroTik] > interface export                                                                                                
# 2025-10-11 20:15:39 by RouterOS 7.19.6
# software id = ****-****
#
# model = RB760iGS
# serial number = ************
/interface bridge
add admin-mac=DC:2B:AD:4D:EC:F2 auto-mac=no name=bridge pvid=199 vlan-filtering=yes
/interface vlan
add comment="Should not be allowed when bridge pvid=199" interface=bridge name=br.199 vlan-id=199
add interface=bridge name=br.200 vlan-id=200
add interface=bridge name=br.210 vlan-id=210
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface bridge port
add bridge=bridge comment=defconf interface=ether2 pvid=200
add bridge=bridge comment=defconf interface=ether3 pvid=200
add bridge=bridge comment=defconf interface=ether4 pvid=199
add bridge=bridge comment=defconf interface=ether5 pvid=210
add bridge=bridge comment=defconf interface=sfp1
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
add interface=br.200 list=LAN
add interface=br.210 list=LAN
[demo@MikroTik] > interface vlan print
Flags: R - RUNNING
Columns: NAME, MTU, ARP, VLAN-ID, INTERFACE
#   NAME     MTU  ARP      VLAN-ID  INTERFACE
;;; Should not be allowed when bridge pvid=199
0 R br.199  1500  enabled      199  bridge   
1 R br.200  1500  enabled      200  bridge   
2 R br.210  1500  enabled      210  bridge   
[demo@MikroTik] > interface bridge vlan print
Flags: D - DYNAMIC
Columns: BRIDGE, VLAN-IDS, CURRENT-TAGGED, CURRENT-UNTAGGED
#   BRIDGE  VLAN-IDS  CURRENT-TAGGED  CURRENT-UNTAGGED
;;; added by vlan on bridge
0 D bridge  199-200   bridge                          
            210                                       
;;; added by pvid
1 D bridge  200                       ether2          
;;; added by pvid
2 D bridge  210                       ether5          
[demo@MikroTik] > interface vlan remove br.199
[demo@MikroTik] > interface bridge vlan print 
Flags: D - DYNAMIC
Columns: BRIDGE, VLAN-IDS, CURRENT-TAGGED, CURRENT-UNTAGGED
#   BRIDGE  VLAN-IDS  CURRENT-TAGGED  CURRENT-UNTAGGED
;;; added by vlan on bridge
0 D bridge       200  bridge                          
                 210                                  
;;; added by pvid
1 D bridge       200                  ether2          
;;; added by pvid
2 D bridge       210                  ether5          
;;; added by pvid
3 D bridge       199                  bridge          
[demo@MikroTik] > interface bridge port print
Flags: I - INACTIVE; H - HW-OFFLOAD
Columns: INTERFACE, BRIDGE, HW, HORIZON, TRUSTED, FAST-LEAVE, BPDU-GUARD, EDGE, POINT-TO-POINT, PVID, FRAME-TYPES
#    INTERFACE  BRIDGE  HW   HORIZON  TRUSTED  FAST-LEAVE  BPDU-GUARD  EDGE  POINT-TO-POINT  PVID  FRAME-TYPES
;;; defconf
0  H ether2     bridge  yes  none     no       no          no          auto  auto             200  admit-all  
;;; defconf
1 IH ether3     bridge  yes  none     no       no          no          auto  auto             200  admit-all  
;;; defconf
2 IH ether4     bridge  yes  none     no       no          no          auto  auto             199  admit-all  
;;; defconf
3  H ether5     bridge  yes  none     no       no          no          auto  auto             210  admit-all  
;;; defconf
4 I  sfp1       bridge  yes  none     no       no          no          auto  auto               1  admit-all  
[demo@MikroTik] > interface bridge print
Flags: D - dynamic; X - disabled, R - running 
 0  R name="bridge" mtu=auto actual-mtu=1500 l2mtu=1596 arp=enabled arp-timeout=auto mac-address=DC:2B:AD:4D:EC:F2 protocol-mode=rstp fast-forward=yes 
      igmp-snooping=no auto-mac=no admin-mac=DC:2B:AD:4D:EC:F2 ageing-time=5m priority=0x8000 max-message-age=20s forward-delay=15s transmit-hold-count=6 
      vlan-filtering=yes ether-type=0x8100 pvid=199 frame-types=admit-all ingress-filtering=yes dhcp-snooping=no port-cost-mode=long mvrp=no 
      max-learned-entries=auto 
[demo@MikroTik] > # change bridge pvid back to default 1
[demo@MikroTik] > interface/bridge/set bridge pvid=1
[demo@MikroTik] > interface bridge print                
Flags: D - dynamic; X - disabled, R - running 
 0  R name="bridge" mtu=auto actual-mtu=1500 l2mtu=1596 arp=enabled arp-timeout=auto mac-address=DC:2B:AD:4D:EC:F2 protocol-mode=rstp fast-forward=yes 
      igmp-snooping=no auto-mac=no admin-mac=DC:2B:AD:4D:EC:F2 ageing-time=5m priority=0x8000 max-message-age=20s forward-delay=15s transmit-hold-count=6 
      vlan-filtering=yes ether-type=0x8100 pvid=1 frame-types=admit-all ingress-filtering=yes dhcp-snooping=no port-cost-mode=long mvrp=no 
      max-learned-entries=auto 
[demo@MikroTik] > interface export
# 2025-10-11 20:22:57 by RouterOS 7.19.6
# software id = ****-****
#
# model = RB760iGS
# serial number = ************
/interface bridge
add admin-mac=DC:2B:AD:4D:EC:F2 auto-mac=no name=bridge vlan-filtering=yes
/interface vlan
add interface=bridge name=br.200 vlan-id=200
add interface=bridge name=br.210 vlan-id=210
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface bridge port
add bridge=bridge comment=defconf interface=ether2 pvid=200
add bridge=bridge comment=defconf interface=ether3 pvid=200
add bridge=bridge comment=defconf interface=ether4 pvid=199
add bridge=bridge comment=defconf interface=ether5 pvid=210
add bridge=bridge comment=defconf interface=sfp1
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
add interface=br.200 list=LAN
add interface=br.210 list=LAN
[demo@MikroTik] > # now that bridge pvid is not 199, we should be able to create vlan interface with vlan-id=119 (and we can)
[demo@MikroTik] > interface vlan add interface=bridge vlan-id=199 name=br.199
[demo@MikroTik] > interface export                                                                                           
# 2025-10-11 20:41:48 by RouterOS 7.19.6
# software id = ****-****
#
# model = RB760iGS
# serial number = ************
/interface bridge
add admin-mac=DC:2B:AD:4D:EC:F2 auto-mac=no name=bridge vlan-filtering=yes
/interface vlan
add interface=bridge name=br.199 vlan-id=199
add interface=bridge name=br.200 vlan-id=200
add interface=bridge name=br.210 vlan-id=210
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface bridge port
add bridge=bridge comment=defconf interface=ether2 pvid=200
add bridge=bridge comment=defconf interface=ether3 pvid=200
add bridge=bridge comment=defconf interface=ether4 pvid=199
add bridge=bridge comment=defconf interface=ether5 pvid=210
add bridge=bridge comment=defconf interface=sfp1
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
add interface=br.200 list=LAN
add interface=br.210 list=LAN
[demo@MikroTik] > # but now we shouldn't be able to change the bridge pvid to 199 (but we can)
[demo@MikroTik] > interface/bridge/pr
Flags: D - dynamic; X - disabled, R - running 
 0  R name="bridge" mtu=auto actual-mtu=1500 l2mtu=1596 arp=enabled arp-timeout=auto mac-address=DC:2B:AD:4D:EC:F2 protocol-mode=rstp fast-forward=yes 
      igmp-snooping=no auto-mac=no admin-mac=DC:2B:AD:4D:EC:F2 ageing-time=5m priority=0x8000 max-message-age=20s forward-delay=15s transmit-hold-count=6 
      vlan-filtering=yes ether-type=0x8100 pvid=1 frame-types=admit-all ingress-filtering=yes dhcp-snooping=no port-cost-mode=long mvrp=no 
      max-learned-entries=auto 
[demo@MikroTik] > interface/bridge/vlan print 
Flags: D - DYNAMIC
Columns: BRIDGE, VLAN-IDS, CURRENT-TAGGED, CURRENT-UNTAGGED
#   BRIDGE  VLAN-IDS  CURRENT-TAGGED  CURRENT-UNTAGGED
;;; added by vlan on bridge
0 D bridge  199-200   bridge                          
            210                                       
;;; added by pvid
1 D bridge  200                       ether2          
;;; added by pvid
2 D bridge  210                       ether5          
;;; added by pvid
3 D bridge  1                         bridge          
[demo@MikroTik] > interface/bridge/port print     
Flags: I - INACTIVE; H - HW-OFFLOAD
Columns: INTERFACE, BRIDGE, HW, HORIZON, TRUSTED, FAST-LEAVE, BPDU-GUARD, EDGE, POINT-TO-POINT, PVID, FRAME-TYPES
#    INTERFACE  BRIDGE  HW   HORIZON  TRUSTED  FAST-LEAVE  BPDU-GUARD  EDGE  POINT-TO-POINT  PVID  FRAME-TYPES
;;; defconf
0  H ether2     bridge  yes  none     no       no          no          auto  auto             200  admit-all  
;;; defconf
1 IH ether3     bridge  yes  none     no       no          no          auto  auto             200  admit-all  
;;; defconf
2 IH ether4     bridge  yes  none     no       no          no          auto  auto             199  admit-all  
;;; defconf
3  H ether5     bridge  yes  none     no       no          no          auto  auto             210  admit-all  
;;; defconf
4 I  sfp1       bridge  yes  none     no       no          no          auto  auto               1  admit-all  
[demo@MikroTik] > interface/bridge/set bridge pvid=199 comment="We should not be allowed to set pvid to 199 when there is a vlan interface for 199"
[demo@MikroTik] > interface/export
# 2025-10-11 20:45:03 by RouterOS 7.19.6
# software id = ****-****
#
# model = RB760iGS
# serial number = ************
/interface bridge
add admin-mac=DC:2B:AD:4D:EC:F2 auto-mac=no comment="We should not be allowed to set pvid to 199 when there is a vlan interface for 199" name=bridge pvid=\
    199 vlan-filtering=yes
/interface vlan
add interface=bridge name=br.199 vlan-id=199
add interface=bridge name=br.200 vlan-id=200
add interface=bridge name=br.210 vlan-id=210
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface bridge port
add bridge=bridge comment=defconf interface=ether2 pvid=200
add bridge=bridge comment=defconf interface=ether3 pvid=200
add bridge=bridge comment=defconf interface=ether4 pvid=199
add bridge=bridge comment=defconf interface=ether5 pvid=210
add bridge=bridge comment=defconf interface=sfp1
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
add interface=br.200 list=LAN
add interface=br.210 list=LAN
[demo@MikroTik] > interface/bridge/port print                                                                                                      
Flags: I - INACTIVE; H - HW-OFFLOAD
Columns: INTERFACE, BRIDGE, HW, HORIZON, TRUSTED, FAST-LEAVE, BPDU-GUARD, EDGE, POINT-TO-POINT, PVID, FRAME-TYPES
#    INTERFACE  BRIDGE  HW   HORIZON  TRUSTED  FAST-LEAVE  BPDU-GUARD  EDGE  POINT-TO-POINT  PVID  FRAME-TYPES
;;; defconf
0  H ether2     bridge  yes  none     no       no          no          auto  auto             200  admit-all  
;;; defconf
1 IH ether3     bridge  yes  none     no       no          no          auto  auto             200  admit-all  
;;; defconf
2 IH ether4     bridge  yes  none     no       no          no          auto  auto             199  admit-all  
;;; defconf
3  H ether5     bridge  yes  none     no       no          no          auto  auto             210  admit-all  
;;; defconf
4 I  sfp1       bridge  yes  none     no       no          no          auto  auto               1  admit-all  
[demo@MikroTik] > interface/bridge/vlan print                                                                                                      
Flags: D - DYNAMIC
Columns: BRIDGE, VLAN-IDS, CURRENT-TAGGED, CURRENT-UNTAGGED
#   BRIDGE  VLAN-IDS  CURRENT-TAGGED  CURRENT-UNTAGGED
;;; added by vlan on bridge
0 D bridge  199-200   bridge                          
            210                                       
;;; added by pvid
1 D bridge  200                       ether2          
;;; added by pvid
2 D bridge  210                       ether5          
[demo@MikroTik] > # change bridge pvid back to 1
[demo@MikroTik] > interface/bridge/set bridge pvid=1 comment="bridge has default pvid=1, don't create vlan interface for vlan-id=1" 
[demo@MikroTik] > interface export
# 2025-10-11 20:49:31 by RouterOS 7.19.6
# software id = ****-****
#
# model = RB760iGS
# serial number = ************
/interface bridge
add admin-mac=DC:2B:AD:4D:EC:F2 auto-mac=no comment="bridge has default pvid=1, don't create vlan interface for vlan-id=1" name=bridge vlan-filtering=yes
/interface vlan
add interface=bridge name=br.199 vlan-id=199
add interface=bridge name=br.200 vlan-id=200
add interface=bridge name=br.210 vlan-id=210
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface bridge port
add bridge=bridge comment=defconf interface=ether2 pvid=200
add bridge=bridge comment=defconf interface=ether3 pvid=200
add bridge=bridge comment=defconf interface=ether4 pvid=199
add bridge=bridge comment=defconf interface=ether5 pvid=210
add bridge=bridge comment=defconf interface=sfp1
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
add interface=br.200 list=LAN
add interface=br.210 list=LAN
[demo@MikroTik] > interface vlan print
Flags: R - RUNNING
Columns: NAME, MTU, ARP, VLAN-ID, INTERFACE
#   NAME     MTU  ARP      VLAN-ID  INTERFACE
0 R br.199  1500  enabled      199  bridge   
1 R br.200  1500  enabled      200  bridge   
2 R br.210  1500  enabled      210  bridge   
[demo@MikroTik] > interface bridge print
Flags: D - dynamic; X - disabled, R - running 
 0  R ;;; bridge has default pvid=1, don't create vlan interface for vlan-id=1
      name="bridge" mtu=auto actual-mtu=1500 l2mtu=1596 arp=enabled arp-timeout=auto mac-address=DC:2B:AD:4D:EC:F2 protocol-mode=rstp fast-forward=yes 
      igmp-snooping=no auto-mac=no admin-mac=DC:2B:AD:4D:EC:F2 ageing-time=5m priority=0x8000 max-message-age=20s forward-delay=15s transmit-hold-count=6 
      vlan-filtering=yes ether-type=0x8100 pvid=1 frame-types=admit-all ingress-filtering=yes dhcp-snooping=no port-cost-mode=long mvrp=no 
      max-learned-entries=auto 
[demo@MikroTik] > interface bridge vlan print
Flags: D - DYNAMIC
Columns: BRIDGE, VLAN-IDS, CURRENT-TAGGED, CURRENT-UNTAGGED
#   BRIDGE  VLAN-IDS  CURRENT-TAGGED  CURRENT-UNTAGGED
;;; added by vlan on bridge
0 D bridge  199-200   bridge                          
            210                                       
;;; added by pvid
1 D bridge  200                       ether2          
;;; added by pvid
2 D bridge  210                       ether5          
;;; added by pvid
3 D bridge  1                         bridge          
[demo@MikroTik] > interface bridge port print
Flags: I - INACTIVE; H - HW-OFFLOAD
Columns: INTERFACE, BRIDGE, HW, HORIZON, TRUSTED, FAST-LEAVE, BPDU-GUARD, EDGE, POINT-TO-POINT, PVID, FRAME-TYPES
#    INTERFACE  BRIDGE  HW   HORIZON  TRUSTED  FAST-LEAVE  BPDU-GUARD  EDGE  POINT-TO-POINT  PVID  FRAME-TYPES
;;; defconf
0  H ether2     bridge  yes  none     no       no          no          auto  auto             200  admit-all  
;;; defconf
1 IH ether3     bridge  yes  none     no       no          no          auto  auto             200  admit-all  
;;; defconf
2 IH ether4     bridge  yes  none     no       no          no          auto  auto             199  admit-all  
;;; defconf
3  H ether5     bridge  yes  none     no       no          no          auto  auto             210  admit-all  
;;; defconf
4 I  sfp1       bridge  yes  none     no       no          no          auto  auto               1  admit-all  
[demo@MikroTik] >