You’re mixing apples with oranges and your VLAN config is a complete mess. You either use VLANs all the way or don’t use them at all, hybrid setups don’t work as expected.
- Remove or change pvid of vlan bridge to 20 and remove frame-types if you don’t want to lock yourself out:
add comment=VLANTEST frame-types=admit-only-vlan-tagged name=bridge_vlan
pvid=200 vlan-filtering=yes
to:
add comment=VLANTEST name=bridge_vlan
vlan-filtering=yes
- Create a VLAN for the 192.168.88.0 network and change all of the settings associated with it:
/interface vlan
add interface=bridge_vlan name=LAN_VLAN vlan-id=30
/ip address
add address=192.168.88.1/22 comment=defconf interface=LAN_VLAN network=
192.168.88.0
/ip dhcp-server
add address-pool=dhcp_pool_Network interface=LAN_VLAN name=dhcp1
- Remove ether3 and ether5 from default bridge and assign them as well as ether2 and ether4 to the vlan bridge. Also add appropriate pvids:
/interface bridge port
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=“Standard Output” frame-types=
admit-only-vlan-tagged interface=ether5
to:
/interface bridge port
add bridge=bridge_vlan interface=ether2 ingress-filtering=yes frame-types=admit-only-untagged-and-priority-tagged pvid=200
add bridge=bridge_vlan comment=defconf interface=ether3 ingress-filtering=yes frame-types=admit-only-untagged-and-priority-tagged pvid=30
add bridge=bridge_vlan interface=ether4 ingress-filtering=yes frame-types=admit-only-untagged-and-priority-tagged pvid=30
add bridge=bridge_vlan comment=“Standard Output” ingress-filtering=
yes frame-types=
admit-only-vlan-tagged interface=ether5
- Remove use-service-tag=yes on VLAN Verwaltung interface because it is associated with a different ethertype (0x88a8), assign it to the vlan bridge and remove vlan_200_out interface:
/interface vlan
add comment=“VLAN Verwaltung” interface=ether5 name=vlan20 use-service-tag=
yes vlan-id=20
add interface=ether5 name=vlan_200_out vlan-id=200
to:
/interface vlan
add comment=“VLAN Verwaltung” interface=bridge_vlan name=vlan20 vlan-id=20
- Clear your whole Bridge VLAN table and add following entries:
/interface bridge vlan
add bridge=bridge_vlan tagged=bridge_vlan,ether5 vlan-ids=20
add bridge=bridge_vlan tagged=bridge_vlan,ether5 vlan-ids=30
add bridge=bridge_vlan tagged=bridge_vlan,ether5 vlan-ids=200
With these settings you’ll achieve the following:
- Transparently forward VLAN200
- Have a management VLAN20 and a VLAN30 for LAN because, as I said, VLAN aware and VLAN non-aware bridges don’t mix well
If you wish, you can make ether4 an untagged port for the VLAN20 to have untagged access to the management VLAN:
/interface bridge port
set [find interface=ether4] pvid=20