VLAN tagged/untagged on same router

Good morning everyone, I’ve been trying to understand how it works for days, now I have an rb3011 and I would like to have it on the same router
-1 tagged port on vlan 10
-1 tagged port on vlan 20
-1 untagged port on vlan 10
-1 untagged port on vlan 20
-1 trunk port with vlan 10,20
Having said that I can’t find anywhere, I’ve been looking for days now, an example of a configuration similar to mine, I only found configurations with the ports all tagged or all untagged. can you help me in some way? A thousand thanks

Can you send the output of

/interface bridge export

i don’t have, it’s a lab test to know the vlan managment in mikrotik, my router it still needs to be configured

Ok, so supposing your bridge is called “bridge” and:

  • ether0: tagged port on vlan 10
  • ether1: tagged port on vlan 20
  • ether2: untagged port on vlan 10
  • ether3: untagged port on vlan 20
  • ether4: trunk port with vlan 10,20

The following should be close to what is needed.

/interface bridge
set [bridge=bridge] vlan-filtering=yes
/interface bridge port
add bridge=bridge interface=ether0 pvid=1 ingress-filtering=yes frames-type=admit-only-vlan-tagged
add bridge=bridge interface=ether1 pvid=1 ingress-filtering=yes frames-type=admit-only-vlan-tagged
add bridge=bridge interface=ether2 pvid=10 ingress-filtering=yes frames-type=admit-only-untagged-and-priority-tagged
add bridge=bridge interface=ether3 pvid=20 ingress-filtering=yes frames-type=admit-only-untagged-and-priority-tagged
add bridge=bridge interface=ether4 pvid=1 ingress-filtering=yes frames-type=admit-only-vlan-tagged
/interface bridge vlan
add bridge=bridge vlan-ids=10 tagged=ether0,ether4 untagged=ether2 comment="VLAN10"
add bridge=bridge vlan-ids=20 tagged=ether1,ether4 untagged=ether3 comment="VLAN20"

wow thank you, finally a clear explanation :smiley: I’ll try and let you know ! thanks

http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1

Just a small tip: do not turn on VLAN filtering until you’ve configured everything else because you may lose access to the router