VLan Type enabled vs strict

SwOS
1

It looks from documentation that for standard VLAN operation you need to set VLAN Type to “strict” instead of just “enabled”.
If you set VLAN Type on port to “enabled” it will pass ANY VLAN that has been defined on ANY port.
The value that only lets pass the VLANs that has been defined for the SPECIFIC port is “strict” (that is, what you would expect on 99% of switches).

Documentation
https://wiki.mikrotik.com/wiki/SwOS/CSS326#VLAN_and_VLANs

Example with does not use “strict”.
https://wiki.mikrotik.com/wiki/SWOS/CSS326-VLAN-Example

So does the example need to be corrected to use “strict” instead of “enabled”?

Why is so complicated to get VLANs right on SwOS?
There should only exist 3 cases: Trunk, Hybrid (with a PVID), and Access. It should not be that hard.

2

I agree.

3

Every SwOS manual is rife with errors… Admins never answer…

4

These examples were created identical with RouterOS bridge examples, see Bridge Trunk and Access Ports. I believe we could add some note that you should use “strict” VLAN mode to enable ingress filtering and a link towards SwOS VLAN manual.

In case you spot any manual error, I would appreciate that you report them to support@mikrotik.com.