v6.41.2 [current]

sindy · February 21, 2018, 7:18pm

I am sorry but I am still confused with the new bridge implementation

I updaten one of my wAP-ac to 6.41.2 and created a bridge - this bridge has an IP 10.0.100.4/24 and PVID1 because the AP itself is a part of the administrative-VLAN1-un-tagged (Internet-Cable-Modem to Firewall to Switch to wAP-ac via TRUNKs).

Connected to the bridge via PORT is the only one available ether1 - this port has a PVID1 as well because if I understood the brief explanation of MikroTik, it is need for the un-tagged ingress (from ether-cable to port-ether1 / port-ether1 to the bridge) traffic … On this PORT there is a cable with Trunk (vlan1-un-tagged, vlan10-tagged, vlan20-tagged, etc.).
Frame-Types = admit all … correct / why ?
Ingress-Filtering = unchecked … correct / why ?

The next PORT to the bridge is the physical WLAN-chip (not vAP) - this port also has PVID1 because the SSID of the WLAN-chip is the administrative-VLAN1-un-tagged.
Frame-Types = admit all … correct / why ?
Ingress-Filtering = unchecked … correct / why ?

Now the vAP’s … e.g. vAP10, vAP20, vAP30, etc.
For example: vAP10 has PVID10
Frame-Types = admit only VLAN tagged … correct / why ?
Ingress-Filtering = unchecked … correct / why ?

Next is interface / bridge / VLAN:

I created VLAN ID = 1
Tagged = empty … correct / why ?
Untagged = bridge, vlan1, wAP-2GHz, wAP5GHz … correct / why ?

I created VLAN ID = 10
Tagged = bridge, vlan10 … correct / why ?
Untagged = vAP10 … correct / why ?

At the end I activated VLAN-Filtering under /interface bridge

One additional question … is it needed to create the VLANs under /interface VLAN, too ?

As you see there are some puzzle-brickets I know but I am not able to make a picture of them

Any help is highly appreciated - especially with explanation

I’d suggest you to either join this topic or create a new one.