Hello
I have vlan 140,150,160,200 being served from another router. On the 760igs, i want to accept all vlans on port 2, make port 3 access port for vlan 200, port 4 access port for vlan 140, then port 5 trunks vlan 150 and 160 to another switch. i would be glad if someone could help me configure this.
below is my config so far
/interface bridge add name=SW-BR
/interface bridge port
add interface=ether2 bridge=SW-BR
add interface=ether3 bridge=SW-BR pvid=200
add interface=ether4 bridge=SW-BR pvid=140
add interface=ether5 bridge=SW-BR
/interface brige vlan
add bridge=SW-BR vlan-ids=200 tagged=ether1,ether3,ether5
add bridge=SW-BR vlan-ids=200 untagged=ether2
add bridge=SW-BR vlan-ids=140 tagged=ether1
add bridge=SW-BR vlan-ids=140 untagged=ether3
add bridge=SW-BR vlan-ids=150 tagged=ether1,ether5
add bridge=SW-BR vlan-ids=160 tagged=ether1,ether5
thank you
I am brand new to ROS; I know much more about the way a Ubiquiti ER-X is configured. But I do have an RB760iGS and I am playing with vlans on it in a lab situation, although I am still trying to wrap my head around the different paradigm that ROS uses for what the ER-X calls the vlan-aware switch0, vifs, and switch-port pvid (untagged vlan) and list of vid(s) (tagged vlans).
Your bridge port section and bridge vlan section don’t seem consistent for the ether ports being used.
Are you just using the RB760iGS as a switch only, i.e. no L3 connectivity to the switch? What version of firmware are you using? This is significant because v7.1 added support for hardware switching assist from the MT7621 SoC when using the bridge interface.
Specifics to what I am talking about:
Your requirements state nothing about ether1 (which I would assume would be what you would call port 1) But the code has multiple references to ether1 in the bridge vlan section
You state you want ether3 to be an access port, yet your code snippet has ether3 in the list of tagged port for vlan-id 200
You state that you want to accept all vlans on port 2, but the only place ether2 is mentioned in the /interface bridge vlan section is vlan-id 200, and it is listed as untagged.
So what is on ether1? (remember that ROS is one based not zero based, i.e. the lowest port is ether1 not ether0)
What have you read?
Some pointers to posts I have found helpful
http://forum.mikrotik.com/t/getting-the-most-out-of-this-forum/40983/1
https://help.mikrotik.com/docs/display/ROS/Bridge#Bridge-BridgeVLANFiltering
http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1
http://forum.mikrotik.com/t/routeros-bridge-mysteries-explained/147832/1
http://forum.mikrotik.com/t/2-ways-to-associate-bridge-and-vlan/156212/1
The answer is at item D. here - https://forum.mikrotik.com/viewtopic.php?t=182373
Assuming you want the Router to really act as a switch. The capac example has a complete format…
Fixed up: Since you didnt detail the purpose of ether1 it is dropped, plus if its not identified on interface bridge ports, useless to be using it in interface bridge vlans This would be a good port to use as OFF BRIDGE access.
/interface bridge add name=SW-BR
/interface bridge port
add interface=ether2 bridge=SW-BR ingress-filtering=yes frame-types=admit-only-vlan-tagged
add interface=ether3 bridge=SW-BR pvid=200 ingress-filtering=yes frame-types=admit-only-untagged-and-priority-tagged
add interface=ether4 bridge=SW-BR pvid=140 ingress-filtering=yes frame-types=admit-only-untagged-and-priority-tagged
add interface=ether5 bridge=SW-BR ingress-filtering=yes frame-types=admit-only-vlan-tagged
/interface bridge vlan
add bridge=SW-BR vlan-ids=200 tagged=SW-BR,ether2 untagged=ether3
add bridge=SW-BR vlan-ids=140 tagged=SW-BR,ether2 untagged=ether4
add bridge=SW-BR vlan-ids=150 tagged=SW-BR,ether2,ether5
add bridge=SW-BR vlan-ids=160 tagged=SW-BR,ether2,ether5