Sure I can look, and will respect your wishes to have separate bridges etc.............
-
I'm kinda org freak so moved rules around per bridge basis for easy understanding.
-
The biggest error I see is not tagging the bridge..... as per --> Using RouterOS to VLAN your network
-
The second error stems from WHY I INSIST ON MANUALLY UNTAGGING ON /interface bridge vlans. So that one can cross-check with /bridge ports.
Yes, it is not mandatory, but only for those that know what they are doing.............. and even then its not something I do. The key to keep in mind is that each /interface bridge vlan LINE in the configuration is to express the tagging and untagging of a single VLAN. You can combine multiple vlan-ids, ONLY IF, the tagging and untagging for each vlan is identical.
Easy to think it is if you dont put in the untagging.................... On the other hand, you can combine 19,29 !!
/interface bridge vlan
add bridge=BR0 tagged="sfp-sfpplus2 - TRUNK1" vlan-ids=10,11 <------
add bridge=BR1 tagged="sfp-sfpplus3 - TRUNK2" vlan-ids=20,21 <-------
add bridge=BR0 tagged="ether2 - TRUNK3" vlan-ids=19
add bridge=BR1 tagged="ether2 - TRUNK3" vlan-ids=29
- Not unexpected to get mixed up trying different approaches an example is this line in the /interface bridge vlan settings.....
add bridge=BR0 tagged="ether2 - TRUNK3" vlan-ids**=19**[/b] Clearly vlan19 has nothing to do with BR0!!
add bridge=BR1 tagged="ether2 - TRUNK3" vlan-ids=29 Ditto, 29 nothing to do with BR1!!
RouterOS 7.13
model = CCR2116-12G-4S+
/interface bridge
add name=BR0 vlan-filtering=yes
add name=BR1 vlan-filtering=yes
add name=BR2 vlan-filtering=yes
/interface ethernet
set [ find default-name=ether2 ] name="ether2 - TRUNK3"
set [ find default-name=sfp-sfpplus2 ] name="sfp-sfpplus2 - TRUNK1"
set [ find default-name=sfp-sfpplus3 ] name="sfp-sfpplus3 - TRUNK2"
/interface vlan
add interface=BR0 name=VLAN10 vlan-id=10
add interface=BR0 name=VLAN11 vlan-id=11
add interface=BR1 name=VLAN20 vlan-id=20
add interface=BR1 name=VLAN21 vlan-id=21
add interface=BR2 name=VLAN19 vlan-id=19
add interface=BR2 name=VLAN29 vlan-id=29
/interface bridge port
add bridge=BR0 ingress-filtering=yes frame-types=admit-only-untagged-and-priority-tagged interface=ether4 pvid=10
add bridge=BR0 ingress-filtering=yes frame-types=admit-only-untagged-and-priority-tagged interface=ether5 pvid=11
add bridge=BR0 ingress-filtering=yes frame-types=admit-only-vlan-tagged interface="sfp-sfpplus2 - TRUNK1"
add bridge=BR1 ingress-filtering=yes frame-types=admit-only-vlan-tagged interface="sfp-sfpplus3 - TRUNK2"
add bridge=BR1 ingress-filtering=yes frame-types=admit-only-untagged-and-priority-tagged interface=ether7 pvid=20
add bridge=BR1 ingress-filtering=yes frame-types=admit-only-untagged-and-priority-tagged interface=ether8 pvid=21
add bridge=BR2 ingress-filtering=yes frame-types=admit-only-vlan-tagged interface="ether2 - TRUNK3"
/ip firewall connection tracking
set enabled=yes
/interface bridge vlan
add bridge=BR0 tagged=BR0,"sfp-sfpplus2 - TRUNK1" untagged=ether4 vlan-ids=10
add bridge=BR0 tagged=BR0,"sfp-sfpplus2 - TRUNK1" untagged=ether5 vlan-ids=11
add bridge=BR1 tagged=BR1,"sfp-sfpplus3 - TRUNK2" untagged=ether7 vlan-ids=20
add bridge=BR1 tagged=BR1,"sfp-sfpplus3 - TRUNK2" untagged=ether8 vlan-ids=21
add bridge=BR2 tagged=BR2,"ether2 - TRUNK3" vlan-ids=19,29
/ip address
add address=192.168.125.12/24 interface=VLAN10 network=192.168.125.0
add address=10.0.11.12/24 interface=VLAN11 network=10.0.11.0
add address=192.168.125.14/24 interface=VLAN20 network=192.168.125.0
add address=10.0.21.12/24 interface=VLAN21 network=10.0.21.0
add address=192.168.125.13/24 interface=VLAN19 network=192.168.125.0
add address=192.168.125.15/24 interface=VLAN29 network=192.168.125.0
/system note
set show-at-login=no
/system routerboard settings
set enter-setup-on=delete-key
[@MikroTik] >