Switch groups, vlan and bridging

RouterOS General
1

Hi guys. How would you do this configuration?

On a rb1100AHx2 I want a private and a guest networks. On port 1-5 (switch group 1) I want the private network untagged and guest network as a tagged vlan (vlanid 7). On port 6-10 (switch group 2) I want the guest network untagged and private network as a tagged vlan (vlanid 5).

Where should I configure vlan for this?
If I put the two master ports for the switch groups into same bridge and add vlan to the bridge, I’ll end up with the same tagged vlan on both switch groups.
If I add vlan to the switch groups master port, I’m unable to bridge the untagged interface of one switch group with the tagged interface of the other switch group.

So I guess I’ll need to combine the config attempts above with some vlan config in the switch group config. Any suggestions?

2

The closest I’ve been to make this work is this: (Testing on rb493g, ros 5.22)

/interface bridge
add l2mtu=1520 name=bridgeV5
add l2mtu=1516 name=bridgeV7

/interface vlan
add interface=bridgeV5 name=vlan7 vlan-id=7
add interface=bridgeV7 name=vlan5 vlan-id=5

/interface bridge port
add bridge=bridgeV5 interface=ether5
add bridge=bridgeV7 interface=ether7
add bridge=bridgeV7 interface=vlan7

Then I have private net untagged on ether5.
And I have the guest net tagged with vlan7 on ether5 and untagged on ether7.

But once I tried

/interface bridge port add bridge=bridgeV5 interface=vlan5

the router rebooted.

3

bump