VLAN traffic in interface list

RouterOS Beginner Basics
1

Hi,
I have a question, probably simple for most people whereas I need an explanation.
I have a Mikrotik Hex S, on its 4th and 5th port I have 2 Trunk ports (vlans 8, 100, 200, 999). The configuration of the vlans is done through Bridge. My question is why it is not showing me traffic on a particular VLAN in the interfaces? Is it because the switch-chip is taking care of it?
When I turn on the torch on the vlan somehow this traffic shows up, when I close the torch - the traffic drops to 0 again.

Of course, on ETH4 and ETH5 port it shows the total traffic. Below screen shots to illustrate my problem.


Config:

# model = RB760iGS

/interface bridge
add name=bridge1
add frame-types=admit-only-vlan-tagged name=bridge_vlany pvid=999 \
    vlan-filtering=yes
/interface vlan
add comment=MGMT interface=bridge_vlany name=vlan8_BRIDGE vlan-id=8
add comment=Kamery interface=bridge_vlany name=vlan100_BRIDGE vlan-id=100
add comment=NET_Garaz interface=bridge_vlany name=vlan200_BRIDGE vlan-id=200

/interface bridge port
add bridge=bridge1 interface=ether2_AP2
add bridge=bridge1 interface=ether3_AP3
add bridge=bridge1 interface=ether1_AP1
add bridge=bridge_vlany interface=ether4_SW_Dom pvid=999
add bridge=bridge_vlany interface=ether5_SW_Garaz pvid=999

/interface bridge vlan
add bridge=bridge_vlany tagged=ether4_SW_Dom,ether5_SW_Garaz,bridge_vlany \
    vlan-ids=8
add bridge=bridge_vlany tagged=ether4_SW_Dom,ether5_SW_Garaz,bridge_vlany \
    vlan-ids=100
add bridge=bridge_vlany tagged=ether5_SW_Garaz,bridge_vlany vlan-ids=200

mt.png
mt2.png
mt3.png

2

Correct, most of traffic stats is missing because bridge is offloaded to switch chip. I’m pretty sure that even if traffic was not offloaded to switch chip (e.g. when all bridge ports were set with hw=no), you still wouldn’t see stats. Reason is that VLAN interface (e.g. vlan100_BRIDGE) is only window to one of VLANs available on bridge_vlany interface (see this thread for more on different bridge personalities) and bridge_vlany interface will only show traffic being sent towards bridge_vlany interface (due to dst MAC address) and broadcas and multicast traffic. So normally VLAN interface will only show traffic between router’s L3 layer and the rest of that VLAN (that’s either traffic being routed via router or traffic directly targeting router, e.g. DHCP or DNS - if router is offering DNS to some VLANs).

When you enable torch, HW offload gets disabled (because then all the traffic has to hit CPU, without it torch can’t do the work.

3

Thank You mkx! You are really forum guru :slight_smile: