Community discussions

MikroTik App
 
bgvndas
just joined
Topic Author
Posts: 8
Joined: Mon Sep 25, 2017 6:24 pm

SwOs CSS106 Only tagged

Tue Jun 19, 2018 10:28 am

Please suggest how to configure CSS106 with only tagged vlan.
Port 1 - port to router tagged vlan 10, 20, 30
Port 2,3,4 - port to client tagged vlan 10, 20, 30
Untagged traffic should be blocked
 
User avatar
artz
MikroTik Support
MikroTik Support
Posts: 88
Joined: Tue Oct 17, 2017 5:51 pm
Location: Riga
Contact:

Re: SwOs CSS106 Only tagged

Tue Jun 19, 2018 5:28 pm

You can set the switch to accept only tagged packets on the ingress port. To do so, set "VLAN Receive = only tagged" under the "VLAN" tab for Port1-Port4.

To filter out all unknown VLANs and allow only 10,20,30, you need to set VLAN mode to either enabled or strict. Under the "VLAN" tab set "VLAN Mode = enabled/strict" for Port1-Port4. After than, open "VLANs" tab, press "append", specify "VLAN ID = 10", set "not a member" for each port that should not forward this VLAN ID (in your case, set "not a member" to Port5 and SFP. Repeat the steps for VLAN20 and VLAN30. That is it! Though you might want to consider to disable unused ports for security reasons.

Don't forget to apply all changes.
 
User avatar
chechito
Forum Guru
Forum Guru
Posts: 3005
Joined: Sun Aug 24, 2014 3:14 am
Location: Bogota Colombia
Contact:

Re: SwOs CSS106 Only tagged

Tue Jun 19, 2018 6:52 pm

Who is online

Users browsing this forum: No registered users and 9 guests