Hello!
I’m trying to get a multiple, primarily port-based VLAN setup working on a CRS109, but can’t seem to get the ingress/egress sorted out correctly. So far I am following the example at https://wiki.mikrotik.com/wiki/Manual:CRS1xx/2xx_series_switches_examples#VLAN for “Port based VLAN”. My setup at the moment is:
/interface bridge
add name=bridge1
/interface bridge port
add bridge=bridge1 interface=ether1 hw=yes
add bridge=bridge1 interface=ether2 hw=yes
add bridge=bridge1 interface=ether3 hw=yes
add bridge=bridge1 interface=ether4 hw=yes
add bridge=bridge1 interface=ether5 hw=yes
add bridge=bridge1 interface=ether6 hw=yes
add bridge=bridge1 interface=ether7 hw=yes
add bridge=bridge1 interface=ether8 hw=yes
/interface ethernet switch ingress-vlan-translation
add ports=ether1,ether2, ether3,ether4 customer-vid=0 new-customer-vid=100
add ports=ether5,ether6 customer-vid=0 new-customer-vid=200
add ports=ether7 customer-vid=0 new-customer-vid=300
add ports=ether8 customer-vid=0 new-customer-vid=400
/interface ethernet switch egress-vlan-tag
add vlan-id=100 tagged-ports=ether1,ether2,ether3,ether4
add vlan-id=200 tagged-ports=ether5,ether6
add vlan-id=300 tagged-ports=ether7
add vlan-id=400 tagged-ports=ether8
/interface ethernet switch vlan
add ports=ether1,ether2,ether3,ether4 vlan-id=100
add ports=ether5,ether6 vlan-id=200
add ports=ether7 vlan-id=300
add ports=ether8 vlan-id=400
At this point I would expect at least ports ether1-ether4 to behave like a switch, but it doesn’t seem to. For example, I don’t get an IP on ether2 from a DHCP server on ether1. So, where did I go wrong? Probably just a misunderstanding on my side.
Note: In the long run, VLANs 200,300,400 shall get DHCP servers and ether3,ether4 shall be trunk ports - but I am in good hopes I can figure that out ionce the VLANs in themselves are working.
Thanks for having a look!