Hello
Need to make filters that for a specific vlan will pass only specific frames in this case I mean accepting only PPPoE, the rest of the traffic is to be dropped.
eg:
port 1 trunk vlan 10,11,12
port 2 trunk vlan 10,11,12
Traffic in vlan 11 is to be only pppoe the rest blocked. Is it possible because I have a problem with this
While such a filter can be put on a port, it is no possible in a vlan
Correct, hardware filtering only handles the frames as they ingress via a port. But you can attach the filter rules to all member ports of VLAN 11 (or, for simplicity, to all ports regardless whether VLAN 11 is permitted on them), and let them match on VLAN ID, so other traffic on the ports will remain unaffected.
Something like (on CRS 3xx):
/interface ethernet switch rule
add switch=switch1 vlan-id=11 mac-protocol=pppoe-discovery ports=ether1,..,ether20
add switch=switch1 vlan-id=11 mac-protocol=pppoe ports=ether1,..,ether20
add switch=switch1 vlan-id=11 ports=ether1,..,ether20 new-dst-ports=“”