I am trying to set up a CCR2216-1G-12XS-2XG as follows: All bridge ports by default untagged with dhcp serving IPs in range 10.0.0.1/24. One port (let’s say sfp-8) should additionally send out tagged traffic on vlan=10 with dhcp serving IPs in range 10.0.10.1/24. My switch will then split the tagg…

Your hitchhikers guide through VLAN: Using RouterOS to VLAN your network - RouterOS / Useful user articles - MikroTik community forum

[image] lele1: add bridge=bridge1 tagged=bridge1 vlan-ids=1 Rules of the Mikrotik Club, just in case: [image] The twelve Rules of Mikrotik Club Beginner Basics Preamble and disclaimer: The following is a set of Rules that are intended as advice useful t…

But before you do anything, take one unused port, or one that you can temporarily use for the initial config AND, create an OffBridge port. Lets assume its port X Name it in ethernet interface /interface ethernet set [ find default-name=etherX ] name=OffBridgeX Give it an IP address and note …

The port that should be used for management is the 1 Gbps ether port. It should not be added to the bridge. See https://cdn.mikrotik.com/web-assets/product_files/CCR2216-1G-12XS-2XQ_220346.png [CCR2216-1G-12XS-2XQ_2203461] for why. Also, what version of RoS are you using? Versions newer than …

Here is my sanitized config and a drawing of what I want to do: # 2025-11-29 16:18:17 by RouterOS 7.21beta9 # software id = 9NNQ-BRU3 # # model = CCR2216-1G-12XS-2XQ # serial number = HJQ0ATJEZF8 /interface bridge add name=bridge1 /interface ethernet set [ find default-name=qsfp28-1-3 ] a…

You have no infomation about switch2. Are ports 1-12 currently working for 10.0.0.0/24? This assumes it will accept traffic for 10.0.0.0/24 as untagged into some vlan on the switch. Ideally you would use the same vlan on the CCR2216 bridge as the pvid on the external switch, this will avoid confu…

Oh sorry I was careless the 2 on the bottom right of the router is supposed to be a 3 and I did not draw the other ports as they are not important right now. Port 3 is supposed to be the hybrid trunk. Ether1 is configured as management port as per the above suggestion. I connected a pc there.

This works perfectly. Thanks a lot. What I am confused about still is this: In order to create a LAN1 list with the vlan1 as a member I would have to add vlan1 as an interface, but if I understand right this should not be needed because it is dynamic?

Check the Rules of Mikrotik Club first :wink:: [image] The twelve Rules of Mikrotik Club Beginner Basics Preamble and disclaimer: The following is a set of Rules that are intended as advice useful to avoid the most common errors observed in configuration poste…

VLANs with tagged and untagged ports

RouterOS Beginner Basics

jaclaz November 26, 2025, 12:17pm 3

Rules of the Mikrotik Club, just in case: