Goal: mirror WAN port (on RB5009) directly to VLAN, then grab this VLAN with RPi suricata IDS
Is there OS option to mirror directly to VLAN interface? Should I use switch rule table?
Or need to mirror to physical port, then plug this port to another untagged physical port for VLAN?