I can confirm that is supported from ROS v7 but I noticed that VLANs have to have access to the bridge port (at least to forward the DHCP request to the uplink router).
host
cannot obtain IP address, configuration as
https://help.mikrotik.com/docs/display/ ... witchchips:
/interface bridge
add name=bridge1 frame-types=admit-only-vlan-tagged
/interface bridge port
add bridge=bridge1 interface=sfp1 frame-types=admit-only-vlan-tagged
add bridge=bridge1 interface=ether2 pvid=20 frame-types=admit-only-untagged-and-priority-tagged
/interface bridge vlan
add bridge=bridge1 tagged=sfp1, ether2 vlan-ids=20
add bridge=bridge1 tagged=sfp1,bridge1 vlan-ids=99
/interface bridge
set bridge1 vlan-filtering=yes
host obtains IP address:
/interface bridge
add name=bridge1 frame-types=admit-only-vlan-tagged
/interface bridge port
add bridge=bridge1 interface=sfp1 frame-types=admit-only-vlan-tagged
add bridge=bridge1 interface=ether2 pvid=20 frame-types=admit-only-untagged-and-priority-tagged
/interface bridge vlan
add bridge=bridge1 tagged=sfp1, ether2, bridge1 vlan-ids=20
add bridge=bridge1 tagged=sfp1,bridge1 vlan-ids=99
/interface bridge
set bridge1 vlan-filtering=yes
The first configuration does work on my CRS328s.
I enable the conntrack temporarily on the hEX S but it showed only VLAN 99 traffic, so VLAN 20 traffic is only on the Switch Chip, which means L2HW does actually work.
I dare to say it is a bug, isn't it?