Warning message "<network> not a bridge port" after upgrade to RouterOS 13.2

RouterOS General
1

Hi folks,
Today I upgraded 2 Mikrotik devices (cAP ax, and hAP ac) to the latest stable RouterOS 7.13.2 from 7.8.
Both APs are configured more or less identically with respect to VLANs.

There is a new message under /interface/bridge/vlan “apnet not a bridge port” which confuses me. Does it mean that I should add the apnet VLAN to the bridge? That VLAN is purely intended for maintenance. Tagged packets with vlan-id 20 enter ether1 and is used for management.

Otherwise everything is working as it should.

Below is the current (edited configuration).

Best regards,

Peter

# 2024-01-24 13:05:19 by RouterOS 7.13.2
# software id = 98Y5-U2C1
#
# model = RB962UiGS-5HacT2HnT
# serial number = BEC80BFBB723
/interface bridge
add name=bridge1 port-cost-mode=short pvid=20 vlan-filtering=yes
/interface vlan
add interface=bridge1 name=apnet vlan-id=20
add interface=bridge1 name=guestnet vlan-id=60
add interface=bridge1 name=persnet vlan-id=110
/interface bridge port
add bridge=bridge1 interface=ether1 internal-path-cost=10 path-cost=10
add bridge=bridge1 frame-types=admit-only-untagged-and-priority-tagged \
    interface=wlan1 internal-path-cost=10 path-cost=10
add bridge=bridge1 frame-types=admit-only-untagged-and-priority-tagged \
    interface=wlan2 internal-path-cost=10 path-cost=10
add bridge=bridge1 frame-types=admit-only-untagged-and-priority-tagged \
    interface=wlan4 internal-path-cost=10 path-cost=10 pvid=60
add bridge=bridge1 frame-types=admit-only-untagged-and-priority-tagged \
    interface=wlan5 internal-path-cost=10 path-cost=10 pvid=110
add bridge=bridge1 frame-types=admit-only-untagged-and-priority-tagged \
    interface=wlan7 internal-path-cost=10 path-cost=10 pvid=60
add bridge=bridge1 frame-types=admit-only-untagged-and-priority-tagged \
    interface=wlan8 internal-path-cost=10 path-cost=10 pvid=110
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/ipv6 settings
set disable-ipv6=yes
/interface bridge vlan
add bridge=bridge1 untagged=ether1,wlan1,wlan2 vlan-ids=1
# apnet not a bridge port
add bridge=bridge1 tagged=bridge1,apnet,ether1 vlan-ids=20
add bridge=bridge1 tagged=ether1 untagged=wlan4,wlan7 vlan-ids=60
add bridge=bridge1 tagged=ether1 untagged=wlan5,wlan8 vlan-ids=110
/ip address
add address=192.168.3.13/23 interface=apnet network=192.168.2.0
2

Please change wrong info in the title

The message says exactly what it says: “apnet not a bridge port”.

/interface bridge vlan

apnet not a bridge port

add bridge=bridge1 tagged=bridge1,> apnet> ,ether1 vlan-ids=20

In fact, you configured the device as if the interface were part of it, even if you didn’t put it between the bridge ports.
The message is only a warning: It’s up to you whether or not to remove it from the bridge vlan configuration or add it to the bridge ports.

3

Any tagged= or untagged= entries under /interface bridge vlan should only be ports listed under /interface bridge port or bridge names (for the bridge-to-CPU port)

You are also mixing tagged and untagged traffic for VLAN 20 on the bridge by having both an /interface vlan with vlan-id=20 attached to the bridge AND /interface bridge with pvid=20, this can cause connectivity issues.

Either
/interface bridge
add name=bridge1 port-cost-mode=short pvid=201 vlan-filtering=yes
…
/interface bridge vlan
…
add bridge=bridge1 tagged=bridge1,apnet,ether1 vlan-ids=20
…
or
/interface vlan
add interface=bridge1 name=apnet vlan-id=20
…
/interface bridge vlan
…
add bridge=bridge1 tagged=bridge1,apnet,ether1 untagged=bridge1 vlan-ids=20
…
/ip address
add address=192.168.3.13/23 interface=apnetbridge1 network=192.168.2.0

Usual caveats regarding cutting yourself off whilst making changes apply.

4

Thanks for the information. I will try it out.

This warning was not given under 7.8, so I missed it there.

Best regards,

Peter

5

Mikrotik have likely added the warning as it is a common misconfiguration. RouterOS does not restrict many configuration settings which could be questionable or not sensible making it much more flexible than offerings from other vendors.