Vlan question

Hello,
considering getting a mikrotik as a home router to replace my opnsense hardware but wondering if I can replicate my current VLAN setup with hardware switching in mikrotik. Considering the RB5009 when released.

From my understanding I would need to setup a bridge to get HW accelerated switching with vlan. Is the setup bellow possible with mikrotik to get switching done in hardware on vlan6 between port 1 and 2 from port example bellow? I do not see any examples when reading the doc

port 1. untagged VLAN 1, VLAN6, VLAN5, VLAN4
port 2. untagged VLAN6
port 3. Trunk, untagged VLAN 1, VLAN 1-7

Good Morning,

It quite an easy Setup, you shouldn’t have any Problem with a Mikrotik Router with a SwitchChip (like the RB5009).

You will have to create a bridge and add the Ports with the parameter “HW=yes” for HW-Offloading.

For the VLAN-Configuration
see manual -->> https://help.mikrotik.com/docs/display/ROS/Bridge+VLAN+Table
or see Video -->> https://www.youtube.com/watch?v=7x5WjkhlEZg

The answer is NO.

Ports from the router are typically in two flavours.
a. Trunk port [action:tagged vlan(s)], this is the case where you are carrying many vlans to another smart device that can read the vlan tags on the traffic - a smart switch or AP for example.
b. Access port [action:untagged vlan], this is the case where you are feeding traffic from one vlan to a dummy device that cannot read vlan tags.
There is a third type that is used not all that frequently and that is a hybrid port.
c. Hybrid port i[action: one untagged vlan, 1 or more tagged vlan(s)] where you can carry traffic from one vlan to a device that is meant for a dummy device and one or more vlans destined for a smart device. Ex. A VOIP modem which is expecting a tagged VOIP vlan for the phone and has ethernet jack for an attached or associated computer (untagged dummy traffic).

Anytime you are feeding a dummy device, only one UNTAGGED vlan is allowed.

Can you explain what is at the other end of port 1??

Your
port1 = not possible
port2 = access port
port3= hybrid port (assuming 2-7 are tagged)

Final comment: Do not use vlan1 on the MT devices, that is best reserved as the default vlan id for the vlan filtering process.