Hello,
I have two MT’s: one x86 pc with level 5 and rb411 with level 4. Between its i have l2 switch dlink des-3018.
I create at MT’s vlan interface vlan1, set vid 111, add ip at pc 10.1.5.1/24 at vlan interface, add ip at rb 411 10.1.5.2/24 at vlan interface too.
At switch I created vlan 111 (Egress (I think it know tagged) between 1 and 2 ports (connected pc and rb411).
But I not have ping between MT’s.
Where my mistake?
If the port on the switch is a member of a vlan on the switch, don’t create a vlan on the MT.
If the port on the switch is NOT a member of a VLAN on the switch, create a VLAN on the MT.
By creating the VLAN on both the switch port, as well as the MT, the switch is encapsulating the MT VLAN within it’s own VLAN… 
Switch is L2 layer and all ports in vlan 1 by default. I think if I create vlan at MT, all packets from this interface have tag ?
Please help me 
If it’s a true L2 switch, it probably has 802.1Q VLAN support (check specifications).
If the switch DOES have 802.1Q VLAN support, and you don’t need to do any VLANs on the switch, see if you can turn off 802.1Q altogether.
If you can’t turn it off, you’re going to have to configure the same VLANs on the switch as you have on the router… this is because if the switch is VLAN-aware, it will drop any packets tagged with a VLAN which it’s not configured for.
But I create at switch vlan 111 tagged at 1 and 2 ports, but it not give me result.
Where you have the PC connected, the port should be untagged.
Why ? I created vlan interface at pc (MT x86) with vid 111.
oh ok… then you’re correct.
what Ethernet interfaces are you using on the PC? not all Ethernet cards support VLANs
RTL8169 Gigabit Ethernet Adapter
That card SHOULD support VLANs, but I would try using an Intel PRO card instead.
I assume you have the following setup:
x86 — l2 switch — rb411
If so, then your config is fine.
I suggest you check that you don’t have any restrictive firewall rules in place and you go through your vlan setup again - confirm that vlan IDs match on both machines and confirm you set the vlans on the correct interfaces.
Cheers.
My problem be in vlan interface at 411. I created it with master interface - ether1, but ehter1 and wlan1 - in bridge. I set master interface - bridge1, and all work fine. Thanks.
AFAIK, VLANs are processed in software, therefore VLANs + Master interfaces are incompatible.