VLAN-Filtering enabled + use-tag -> no connection

Hi,

I tried with ROS 7.7 to create multiple SSIDs, separated with VLANs as decribed here:
https://wiki.mikrotik.com/wiki/Manual:VLANs_on_Wireless

Here is stated:

Note: It is important to set wlan1,wlan2 vlan-mode to “use-tag”.

And:

/interface bridge
add fast-forward=no name=bridge1 vlan-filtering=yes

But exactly THIS does NOT work!
vlan-filtering=yes + use-tag → no connection
vlan-filtering=no + use-tag → connection
vlan-filtering=yes + no-tag → connection

If you choose “vlan-filtering=yes + no-tag” it is needed to set the correct PVID on the VLAN-Ports too!


Can someone explain this and why it is described that way in the wiki?

There are two ways, you need to decide which one you use:

  1. you have your wlan interfaces connected to a tagged bridge port, or a tagged ethernet interface.
    then you set the wlan interface to “use tag” and put the proper VLAN number in the tag.
  2. you use the (newer) vlan-filtering bridge with the wlan interface connected as an untagged port on the correct VLAN.
    then you do NOT set the wlan interface to “use tag”.

https://forum.mikrotik.com/viewtopic.php?p=908118