RB450G and 802.1q over 802.3ad

Hello all,

I have been using 802.1q between my RB450G and my Zyxel GS1910 switch for quite some months now.
Wanted to play with 802.3ad and until now I’m completely unsuccessful. I kind of see the link is trying to establish but it doesn’t settle down.

Should I be able to do 802.1q over 802.3ad with the RB450G ?

I have dedicated two ports (ether3 and ether4) to this link using bonding and configured vlans on the bonding interface.
I also declared the vlans @ the switch level for ports ether3 and ether4 (not sure this is useful?).

/interface ethernet
set [ find default-name=ether3 ] comment="Trunk to Zyxel switch LACP 1" mac-address=00:AB:CD:EF:AB:CD name=ether3-trunk-to-zyxel-lacp1 speed=1Gbps
set [ find default-name=ether4 ] comment="Trunk to Zyxel switch LACP 2" disabled=yes mac-address=00:AB:CD:EF:AB:CD name=ether4-trunk-to-zyxel-lacp2 speed=1Gbps
/interface bonding
add arp-ip-targets=0.0.0.0 comment="LACP to Zyxel GS1910" down-delay=3ms mii-interval=10ms mode=802.3ad name=lacp-to-zyxel-gs1910 slaves=ether3-trunk-to-zyxel-lacp1,ether4-trunk-to-zyxel-lacp2 up-delay=3ms
/interface vlan
add comment="VLAN100" interface=lacp-to-zyxel-gs1910 name=vlan100 vlan-id=100
add comment="VLAN200" interface=lacp-to-zyxel-gs1910 name=vlan200 vlan-id=200
add comment="VLAN300" interface=lacp-to-zyxel-gs1910 name=vlan300 vlan-id=300
/interface ethernet switch port
set 2 vlan-mode=secure
set 3 vlan-mode=secure
/interface ethernet switch vlan
add ports=switch1-cpu,ether3-trunk-to-zyxel-lacp1,ether4-trunk-to-zyxel-lacp2 switch=switch1 vlan-id=100
add ports=switch1-cpu,ether3-trunk-to-zyxel-lacp1,ether4-trunk-to-zyxel-lacp2 switch=switch1 vlan-id=200
add ports=switch1-cpu,ether3-trunk-to-zyxel-lacp1,ether4-trunk-to-zyxel-lacp2 switch=switch1 vlan-id=300

Is it the correct way to go ?

Thank you!

For the record - What should have been spotted here is

/interface ethernet switch port
set 2 vlan-mode=secure
set 3 vlan-mode=secure

When set to fallback it works straight away. So I guess LACP packets without VLAN tag should be able to go through the LAG ports (maybe for what regard the L2 negotation).