VLAN help

New to Mikrotik.
I have a CRS354-48G-4S+2Q+ trying to create VLANs but I get errors when following the docs.
Following https://wiki.mikrotik.com/wiki/Manual:CRS3xx_VLANs_with_Bonds and other links in the wiki and beating my head for hours trying to sort this out but the docs don’t seem to work on this switch.
From what I gather I need to configure port switching and trunks. Coming from the Cisco world it’s not a problem but this has me cross eyed.
After a reset and no other settings made I get the following:

[admin@MikroTik] > /interface bridge
[admin@MikroTik] /interface bridge> add name=bridge vlan-filtering=no
failure: already have interface with such name
[admin@MikroTik] /interface bridge> /interface bridge port
[admin@MikroTik] /interface bridge port> add bridge=bridge interface=ether1 pvid=10 hw=yes
failure: device already added as bridge port

Wiki examples assume no pre-existing config. When you start off with device which already has some config, it is indeed a bit tougher. In your case, where ether1 is already member of a bridge, you should simply set [ find interface=ether1 ] pvid=10 .. Etc.

Thanks, I’ll give it a shot. This is a new CRS354-48G-4S+2Q+ no pre-exisitng config this is default and I’ve reset it several times after trying different things from the wiki.

If you understand Cisco VLANs, this document will help you

https://stubarea51.net/2019/02/06/cisco-to-mikrotik-switching-and-vlans/

And plese fell free to ask me questions

Thank you I’ll check it out.

Still fighting this.
IPAsupport: Great link but it follows the wiki and the CRS354-48G-4S+2Q+ doesn’t seem play along. All of the interfaces seem to be a member to a bridge out of the box.

Read something that said I needed to slave all of the interfaces to the uplink:

[admin@MikroTik] /interface ethernet> set [ find default-name=ether48 ] master-port=sfp-sfpplus1
expected end of command (line 1 column 35)

Everything I’ve read just gives me errors. Not even trying to config it to my needs just following along in the wiki.
What I need to do is create vlans and some trunks with one trunk uplink going to a router.

Access interfaces
int 1 vlan 100
int 2 vlan 100
int 3 vlan 100
int 4 vlan 110
int 5 vlan 120
int 6 vlan 130

Trunk interfaces
int 7 vlan 200
int 8 vlan 300,400
int 9 vlan 500,600

Uplink trunk
int 49

I don’t know if that makes any sense.

To create a VLAN go to the /interface vlan menu


use the following command

[admin@MikroTik] /interface vlan>
add name=vlan100 vlan-id=100 interface=ether1

This is the tricky part in MikroTik, the vlan will become an interface. In order to comunicate between VLANs assign IP addresses to each one of them, go to /ip address

[admin@MikroTik] ip address>
 add address=10.10.100.1/24 interface=vlan100

You must have wandered into the historic section of the wiki (or the numerous out-of-date third-party examples around the web) as master-port= hardware switching mechanism was removed from RouterOS in version 6.41 (released Dec 2017). https://wiki.mikrotik.com/wiki/Manual:Interface/Bridge#Bridge_VLAN_Filtering should cover everything you need.


What I need to do is create vlans and some trunks with one trunk uplink going to a router.

Access interfaces
int 1 vlan 100
int 2 vlan 100
int 3 vlan 100
int 4 vlan 110
int 5 vlan 120
int 6 vlan 130

Trunk interfaces
int 7 vlan 200
int 8 vlan 300,400
int 9 vlan 500,600

Uplink trunk
int 49

There isn’t a Mikrotik equivalent to ‘trunk all VLANs’, you have to specify them. So fragments for your example would be

/interface bridge
add name=bridge vlan-filtering=yes

/interface bridge port
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=yes interface=ether1 pvid=100
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=yes interface=ether2 pvid=100
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=yes interface=ether3 pvid=100
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=yes interface=ether4 pvid=110
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=yes interface=ether5 pvid=120
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=yes interface=ether6 pvid=130
add bridge=bridge frame-types=admit-only-vlan-tagged ingress-filtering=yes interface=ether7
add bridge=bridge frame-types=admit-only-vlan-tagged ingress-filtering=yes interface=ether8
add bridge=bridge frame-types=admit-only-vlan-tagged ingress-filtering=yes interface=ether9

add bridge=bridge frame-types=admit-only-vlan-tagged ingress-filtering=yes interface=sfp-sfpplus1 (assuming that is the name of the SFP port)

/interface bridge vlan
add bridge=bridge tagged=sfp-sfpplus1 vlan-ids=100
add bridge=bridge tagged=sfp-sfpplus1 vlan-ids=110
add bridge=bridge tagged=sfp-sfpplus1 vlan-ids=120
add bridge=bridge tagged=sfp-sfpplus1 vlan-ids=130
add bridge=bridge tagged=sfp-sfpplus1,ether7 vlan-ids=200
add bridge=bridge tagged=sfp-sfpplus1,ether8 vlan-ids=300
add bridge=bridge tagged=sfp-sfpplus1,ether8 vlan-ids=400
add bridge=bridge tagged=sfp-sfpplus1,ether9 vlan-ids=500
add bridge=bridge tagged=sfp-sfpplus1,ether9 vlan-ids=600


As you have existing bridge and bridge ports you can use set rather than add as mentioned by mkx, or use the Winbox GUI - more clicking but hides you from the CLI syntax.

Makes sense I was wading in old docs and lots of old info while googling.
I take it there is no such thing as a native vlan just untagged vlans?

Off topic but is there any Mikrotik training online or is all of it in person?

Thanks everyone that helped out!