Hello
Is there any possible to configure RB2011UAS like on the picture below using chip switch?
Port-Based-e2.png
Regards.
ManyX
totally possible
take a look at this
Perhaps you can explain a little more detailed. I did not manage to get this running on RB2011UiAS-RM.
It is no problem to assign VLANs to ports, but I failed in untaggig one VLAN while leaving the other VLANs tagged for output packets and tagging untagged traffic while leaving all tagged traffic as is.
Best regards,
Jan
/interface ethernet switch vlan
add independent-learning=yes ports=switch1-cpu,ether2-trunk switch=switch1 vlan-id=123
This command will allow switching between switch1-cpu and ether2.
/interface ethernet switch port
set ether2-trunk vlan-mode=secure vlan-header=add-if-missing default-vlan-id=123
vlan-mode=secure will enforce check that VLAN tag is present in VLAN table. vlan-header=add-if-missing will add the tag to untagged frames, and default-vlan-id defines which VLAN is untagged.
Is it possible to have hybrid vlans on same switch without creating bridge? Bridge causes cpu to be used and that becomes a performance bottleneck really soon, even with 100Mbps speeds only… not to mention if you try to push 1Gbps speeds…
I have the same issue as you with RB450G. Finally, ended up buying Cloud Router Switch which has detailed ingress and egress vlan translation.
Yes it is possible to have multiple VLANs on the same interface in the same switchgroup (switch1 or switch2) and also unttaged VLAN (Hybrid port)
/interface ethernet switch port
set 0 default-vlan-id=10 vlan-header=add-if-missing vlan-mode=secure
set 1 default-vlan-id=30 vlan-header=always-strip vlan-mode=secure
set 2 default-vlan-id=10 vlan-header=always-strip vlan-mode=secure
set 3 vlan-mode=fallback
set 4 default-vlan-id=30 vlan-header=always-strip vlan-mode=secure
set 5 default-vlan-id=0 vlan-mode=secure
/interface ethernet switch vlan
add independent-learning=yes ports=switch1-cpu,ether1,ether2,ether3 switch=switch1 vlan-id=10
add independent-learning=yes ports=switch1-cpu,ether1,ether2,ether5 switch=switch1 vlan-id=20
add independent-learning=yes ports=switch1-cpu,ether1,ether5 switch=switch1 vlan-id=30
add independent-learning=yes ports=switch1-cpu,ether5 switch=switch1 vlan-id=40
ether1 → tagged VLAN 10, VLAN 20 and VLAN 30 (Hybrid Port with PVID set to VLAN10)
ether2 → untagged VLAN 30, tagged VLAN 20 and VLAN 30 (Hybrid Port)
ether3 → untagged VLAN 10 (Access port)
ether4 → no VLAN check (Link to ISP)
ether5 → Untagged VLAN30, tagged VLAN20, VLAN 30 and VLAN 40 (Hybrid port)