Hello,
Upgrading to v6.41.2 and removing master port, so I want to hear about the best practices about hardware offloaded VLAN ports via switch menu (between ports on same VLAN ID).
My goal (using Routerboard like 951G-2HnD):
- ether1 is connected to ISP (using NAT).
- ether2 to ether5 are used for local network as switch.
- ether3 and ether4 are used for other VLAN network (VLAN 500).
- Traffic between ether3 and ether4 must be hardware offloaded (not using CPU).
- Traffic between ether2 and ether5 must be hardware offloaded (not using CPU).
- All routing (between VLANs) must be done in the same routerboard.
I do this with master port and it works (ether5 is the master port):
/interface bridge
add name=bridge-internal protocol-mode=none
add fast-forward=no name=bridge-work protocol-mode=none
/interface vlan
add interface=ether5 name=vlan-500-work vlan-id=500
/interface ethernet
set [ find default-name=ether2 ] master-port=ether5
set [ find default-name=ether3 ] master-port=ether5
set [ find default-name=ether4 ] master-port=ether5
/interface ethernet switch vlan
add independent-learning=no ports="ether2,ether3,ether4,ether5,switch1-cpu" switch=switch1 vlan-id=500
/interface ethernet switch port
set 1 default-vlan-id=500 vlan-mode=secure
set 2 default-vlan-id=500 vlan-mode=secure
set 4 vlan-mode=fallback
set 5 vlan-mode=fallback
With the v6.41.2 when I change VLAN interface from ether5 to the bridge I can use again hardware offload for VLANs and other ports.
/interface vlan
add interface=bridge-internal name=vlan-500-work vlan-id=500
Is this the best way to do it? I can’t use VLAN Filtering on the bridge, because this will break hardware offload on this routerboard.