Hi,
On eth1 I am receiving taged vlans.
To eth2 I have connected linux that resend vlan to clients.
To make it work I making bridge and putting to bridge f.e. vlan100-eth0 and vlan100-eth1.
I want to have 1 address IP for all vlans, so I create one bridge and add there all vlans, and put on this address 10.0.0.1/24:
vlan100-eth0 and vlan100-eth1, vlan101-eth0 and vlan101-eth1 … and so on
now I can ping from every client my CCR with ip 10.0.0.1, just because of this bridge, clients can see each other between vlans.
client on vlan 100 - 10.0.0.100
client on vlan 101 - 10.0.0.101
they can ping each other even if they have another vlans, because I connected it on CCR 10.0.0.1 to one bridge.
I dont want they to see each other. So as I understand I need to do it on switch.
How 
please help