VLAN project. Need help

RouterOS General
1

What is the correct configuration for this scenario?

This 1

/interface vlan
add interface=sfp1 name=sfp1-vlan4 vlan-id=4
add interface=sfp1 name=sfp1-vlan17 vlan-id=17
add interface=sfp1 name=sfp1-vlan424 vlan-id=424

/interface bridge
add name=bridge-vlan

/interface bridge port
add bridge=bridge-vlan interface=sfp1-vlan4
add bridge=bridge-vlan interface=sfp1-vlan17
add bridge=bridge-vlan interface=sfp1-vlan424
add bridge=bridge-vlan interface=ether5

OR 2

/interface vlan
add interface=sfp1 name=sfp1-vlan4 vlan-id=4
add interface=ether5 name=eth5-vlan4 vlan-id=4
add interface=sfp1 name=sfp1-vlan17 vlan-id=17
Add interface ether5 name=eth5-vlan17 vlan-if=17
add interface=sfp1 name=sfp1-vlan424 vlan-id=424
Add interface ether5 name=eth5-vlan424 vlan-if=424

/interface bridge
add name=bridge-vlan4
add name=bridge-vlan17
add name=bridge-vlan424

/interface bridge port
add bridge=bridge-vlan4 interface=sfp1-vlan4
add bridge=bridge-vlan4 interface=eth5-vlan4
add bridge=bridge-vlan17 interface=sfp1-vlan17
add bridge=bridge-vlan14 interface=eth5-vlan17
add bridge=bridge-vlan424 interface=sfp1-vlan424
add bridge=bridge-vlan424 interface=eth5-vlan424

Thank to everyone for your help

2

Hey. Second one.

3

Thanks Anumrak.

Do you know another method? both routers have firmware version 6.43

4

I heard, but I didn’t go into details. Search in Tik’s wiki. It just tagging ports via ports in bridge I think.

5

Second.

But on 6.43 there is an easier way:

/interface vlan
add interface=bridge-vlan name=vlan4 vlan-id=4
add interface=bridge-vlan name=vlan17 vlan-id=17
add interface=bridge-vlan name=vlan424 vlan-id=424

/interface bridge
add name=bridge-vlan vlan-filtering=yes

/interface bridge port
add bridge=bridge-vlan interface=sfp1
add bridge=bridge-vlan interface=ether5

/interface bridge vlan
add bridge=bridge-vlan tagged=sfp1,ether5 vlan-ids=4,17,424
6

Great, thanks for your help.

7

As per the drawing of your config, your frames are coming in tagged and leaving tagged as well, which indicates the Vlans are living on other devices, so, except for management of device, you do not need Vlan interfaces on these devices.

Bellow config should suffice (NB. Done from memory, not tested):

/interface vlan
add interface=bridge-vlan name=vlan99 vlan-id=99 #For access to and management of device

/ip address
add interface=vlan99 address=xx.xx.xx.xx/xx #IP Address for management vlan99

/interface bridge port
add bridge=bridge-vlan interface=sfp1
add bridge=bridge-vlan interface=ether5

/interface bridge vlan
add bridge=bridge-vlan tagged=sfp1,ether5 vlan-ids=4,17,424
add bridge=bridge-vlan tagged=bridge-vlan,sfp1,ether5 vlan-ids=99

/interface bridge
add name=bridge-vlan vlan-filtering=yes