vlan and bridge forward traffic to wds interfaces

kingkk110 · Mon Aug 05, 2019 6:32 pm

Hello

I have a network with 3 vlans and using wireless WDS.
I have an omnitik which has the following configuration:

/interface bridge
add name=bridge-vlan20 protocol-mode=none
add name=bridge1 protocol-mode=none
/interface wireless
set [ find default-name=wlan1 ] band=5ghz-onlyn disabled=no frequency=5025 frequency-mode=superchannel \
    ht-basic-mcs=mcs-0 ht-supported-mcs=mcs-0,mcs-1,mcs-2,mcs-3,mcs-4,mcs-5,mcs-6 mode=ap-bridge \
    radio-name=ZN-SQHP-5-1 rate-set=configured scan-list=5025 ssid=ZN-SQHP-5-1 wds-default-bridge=bridge1 \
    wds-mode=dynamic
/interface wireless wds
add disabled=no master-interface=wlan1 name="xx" wds-address=CC:2D:xxxxxxx
add disabled=no master-interface=wlan1 name="xx" wds-address=CC:2D:xxxxxxx
add disabled=no master-interface=wlan1 name="xx" wds-address=74:4D:xxxxxxx
add disabled=no master-interface=wlan1 name="xx" wds-address=CC:2D:xxxxxxx
add disabled=no master-interface=wlan1 name="xx" wds-address=64:D1:xxxxxxx
/interface vlan
add interface=bridge1 name=vlan20 vlan-id=20
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" mode=dynamic-keys \
    supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/interface bridge port
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=wlan1
add bridge=bridge-vlan20 interface=ether5
add bridge=bridge-vlan20 interface=vlan20
/ip address
add address=172.16.14.10/24 interface=bridge1 network=172.16.14.0
/system identity
set name=ZN-O-5-1
/tool graphing interface
add

I did this because I want to the wlan to stay as a trunk and only ether 5 to be in vlan20.

i am having a problem when the interface 5 which is in vlan 20 is sending or receiving data this data bandwidth is shown on all wds interfaces for example if this interface uses 4 mega bandwidth each wds interface will have 4 mega bandwidth and the wlan interface will reach 20 mega in the tx.
if i disable the ether5 all wds will work fine.

please can you help me what is the reason? May I miss-configure something?

Thanks

sebastia · Tue Aug 06, 2019 12:50 am

Hey

your vlan20 is "hosted" by bridge1, with all of it's interfaces. So any traffic over ether5 / vlan20 will be propagated to all possible participants.

The config seems to be pre 6.41, right? Upgrade to post 6.41+ and depending on switch chip capabilities use brdige vlan or switch vlan filtering.

kingkk110 · Tue Aug 06, 2019 11:58 am

hello

No the config is done on 6.43.14.
Can you show how it can be done by

switch chip capabilities use brdige vlan or switch vlan filtering.

Thanks

sebastia · Wed Aug 07, 2019 3:30 pm

Have a look at this thread for general info: viewtopic.php?f=13&t=143620
and this wiki for switch based: https://wiki.mikrotik.com/wiki/Manual:S ... p_Examples

kingkk110 · Fri Aug 09, 2019 4:15 pm

Have a look at this thread for general info: viewtopic.php?f=13&t=143620
and this wiki for switch based: https://wiki.mikrotik.com/wiki/Manual:S ... p_Examples

You mean If I use this below according to the setup examples in the 1st link, I can make all ports as trunks except ether5 will be in vlan20. Right?

/interface ethernet switch vlan
add ports=ether1,ether2,ether3,ether4 switch=switch1 vlan-id=10
add ports=ether1,ether2,ether3,ether4 switch=switch1 vlan-id=11
add ports=ether1,ether2,ether3,ether4,ether5 switch=switch1 vlan-id=20
/interface ethernet switch port
set ether1 vlan-mode=secure vlan-header=add-if-missing
set ether2 vlan-mode=secure vlan-header=add-if-missing
set ether3 vlan-mode=secure vlan-header=add-if-missing
set ether4 vlan-mode=secure vlan-header=add-if-missing
set ether5 vlan-mode=secure vlan-header=always-strip default-vlan-id=20

sebastia · Sat Aug 10, 2019 4:29 am

Don't know about the other vlans, but 20 should be carried only over ether5 + cpu, so

# only to cpu & ether5
/interface ethernet switch vlan
add ports=ether5,switch1-cpu switch=switch1 vlan-id=20

# add cpu port info
/interface ethernet switch port
set switch1-cpu vlan-header=leave-as-is vlan-mode=secure

All that assuming you have vlan filtering in hardware capable switch chip

vlan and bridge forward traffic to wds interfaces

vlan and bridge forward traffic to wds interfaces

Re: vlan and bridge forward traffic to wds interfaces

Re: vlan and bridge forward traffic to wds interfaces

Re: vlan and bridge forward traffic to wds interfaces

Re: vlan and bridge forward traffic to wds interfaces

Re: vlan and bridge forward traffic to wds interfaces

Who is online