Hello everybody,
I want to set up some VLANs on the router, followed the guide http://wiki.mikrotik.com/wiki/Manual:Switch_Chip_Features and I’ve read the posts on the board, but things are not working as expected.
The test setup is quite simple:
Airport ← untagged VL 20, tagged VL 1003 → eth2 (master) - eth5 (slave) ← untagged VL 99 → PC
I’m focusing on the PC, other settings are default. Following observations and questions:
/interface ethernet switch port
set 4 default-id=99 vlan-mode=secure
/interface ethernet switch vlan
add ports=ether5-slave switch=switch1 vlan-id=99
I expected that with vlan-mode=secure on eth5 only packets tagged VLAN 99 arrive at the PC, but this is not the case. I can observe packets tagged with 1003 and untagged packets from the Airport. Why?
If I set vlan-header=always-strip, I can see the same packets - all untagged.
We set up a vlan interface and addresses:
/interface vlan
add interface=eth2 l2mtu=1516 name=vlan.99 vlan-id=99
/ip address=10.0.99.1/24 interface=vlan.99 network=10.0.99.0
Arping from RB to PC is not working as expected. The packet flows from vlan.99 (tagged) to the PC (untagged), but on the way back it stays untagged and the arping fails. According to the wiki Packets without vlan tag are treated just like if they had a vlan tag with port default-vlan-id.
What am I missing?
Dirk