I have a problem with building QinQ scheme on "new bridge" with vlan-filtering on Mikrotik CCR1016-12G RouterOS v6.48.4
My goal: I need to take vlan 3119 (CVID) from interface ether1 and pack it into the vlan 52 (SVID) on vpls interface justnet_vlan52
Config:
Code: Select all
/interface ethernet
set [ find default-name=ether1 ] l2mtu=1598 mtu=1598
/interface vpls
add advertised-l2mtu=1550 cisco-style=yes cisco-style-id=103 disabled=no l2mtu=1550 mac-address=02:73:81:DD:2D:AE name=justnet pw-type=\
tagged-ethernet remote-peer=172.16.33.6 use-control-word=yes
/interface vlan
add interface=ether1 name=vlan3119_eth1 vlan-id=3119
add interface=justnet name=justnet_vlan52 vlan-id=52
/interface bridge
add name=br_justnet protocol-mode=none vlan-filtering=yes
/interface bridge port
add bridge=br_justnet interface=vlan3119_eth1 multicast-router=disabled pvid=3119 tag-stacking=yes
add bridge=br_justnet interface=justnet_vlan52 multicast-router=disabled pvid=52
/interface bridge vlan
add bridge=br_justnet tagged=justnet_vlan52 untagged=vlan3119_eth1 vlan-ids=3119
With this configuration, I have the following situation:
1. Tagged traffic (dhcp requests) in vlan 3119 comes to the "ether1" interface.
2. I take only this vlan through the "vlan3119_eth1" interface.
3. I add tag 3119 to the traffic to the "vlan3119_eth1" interface via tag-stacking and add this interface to the "br_justnet" bridge.
4. I make a bridge vlan rule that adds one more tag (52) to the existing one (3119)
5. That's all.
Then I look at the traffic dump using "torch":
On the "vlan3119_eth1" interface, I see incoming dhcp requests. Then they fly via the "justnet" interface to the BRAS, which sends responses back to the "justnet" interface. I see these responses on the "justnet_vlan52" interface with tag 3119 (since tag 52 is already removed on "justnet_vlan52").
And HERE, I expect that traffic with the 3119 tag, according to the existing rule in the bridge vlan, will go to the "vlan3119_eth1" interface, where the 3119 tag will be removed and the responses will go further to "ether1". But in fact, responses are NOT sent to "vlan3119_eth1".
Where am I wrong?
I did a similar config earlier on an old RouterOS 6.42.1 firmware on the same CCR1016-12G and it worked as expected.
Any help on this situation would be welcome.
Thanks!