our uplink into the network would be the SFP.
We have a bridge and all ports are in there.
Now how can I add port 5 or port 6 untagged in VLAN 100 or VLAN200?
Code: Select all
/interface bridge
add name=BRIDGE
/interface vlan
add comment=MGT interface=sfp1 name=VLAN_99 vlan-id=99
add comment=COMPANY interface=sfp1 name=VLAN_100 vlan-id=100
add comment=GAST interface=sfp1 name=VLAN_200 vlan-id=200
add comment=DMZ interface=sfp1 name=VLAN_300 vlan-id=300
add comment=HOTSPOT interface=sfp1 name=VLAN_400 vlan-id=400
add comment=PRIVAT interface=sfp1 name=VLAN_500 vlan-id=500
add comment=LTE interface=sfp1 name=VLAN_600 vlan-id=600
add comment=BACKUP1 interface=sfp1 name=VLAN_700 vlan-id=700
add comment=BACKUP2 interface=sfp1 name=VLAN_800 vlan-id=800
add comment=PHONE interface=sfp1 name=VLAN_900 vlan-id=900
add comment=IOT interface=BRIDGE name=VLAN_1000 vlan-id=1000
add comment=PRINTER disabled=yes interface=sfp1 name=VLAN_1100 vlan-id=1100
add comment=MUSIK disabled=yes interface=sfp1 name=VLAN_1200 vlan-id=1200
add comment=KAMERA disabled=yes interface=sfp1 name=VLAN_1300 vlan-id=1300
add disabled=yes interface=sfp1 name=VLAN_1400 vlan-id=1400
add disabled=yes interface=sfp1 name=VLAN_1500 vlan-id=1500
add disabled=yes interface=sfp1 name=VLAN_1600 vlan-id=1600
add disabled=yes interface=sfp1 name=VLAN_1700 vlan-id=1700
/interface ethernet switch port
set 2 vlan-mode=secure
set 3 vlan-mode=secure
set 4 vlan-mode=secure
set 5 default-vlan-id=1000 vlan-header=always-strip vlan-mode=secure
set 6 default-vlan-id=1000 vlan-header=always-strip vlan-mode=secure
set 7 default-vlan-id=100 vlan-header=always-strip vlan-mode=secure
set 8 vlan-mode=secure
set 10 vlan-mode=secure
set 11 vlan-mode=secure
/interface list
add name=WAN
add name=VLAN
add name=LAN
/interface bridge port
add bridge=BRIDGE interface=ether5
add bridge=BRIDGE interface=ether6
add bridge=BRIDGE interface=ether7
add bridge=BRIDGE frame-types=admit-only-vlan-tagged interface=ether9
add bridge=BRIDGE interface=sfp1
add bridge=BRIDGE interface=ether8
/interface bridge settings
set use-ip-firewall-for-vlan=yes
/interface bridge vlan
add bridge=BRIDGE disabled=yes tagged=BRIDGE,ether5,ether6,ether7,ether8,ether9,sfp1 vlan-ids=99
add bridge=BRIDGE disabled=yes tagged=BRIDGE,ether5,ether6,ether7,ether8,ether9,sfp1 vlan-ids=100
add bridge=BRIDGE disabled=yes tagged=BRIDGE,ether5,ether6,ether7,ether8,ether9,sfp1 vlan-ids=200
add bridge=BRIDGE disabled=yes tagged=BRIDGE,ether5,ether6,ether7,ether8,ether9,sfp1 vlan-ids=300
add bridge=BRIDGE disabled=yes tagged=BRIDGE,ether5,ether6,ether7,ether8,ether9,sfp1 vlan-ids=400
add bridge=BRIDGE disabled=yes tagged=BRIDGE,ether5,ether6,ether7,ether8,ether9,sfp1 vlan-ids=500
add bridge=BRIDGE disabled=yes tagged=BRIDGE,ether5,ether6,ether7,ether8,ether9,sfp1 vlan-ids=600
add bridge=BRIDGE disabled=yes tagged=BRIDGE,ether5,ether6,ether7,ether8,ether9,sfp1 vlan-ids=700
add bridge=BRIDGE disabled=yes tagged=BRIDGE,ether5,ether6,ether7,ether8,ether9,sfp1 vlan-ids=800
add bridge=BRIDGE disabled=yes tagged=BRIDGE,ether5,ether6,ether7,ether8,ether9,sfp1 vlan-ids=900
add bridge=BRIDGE disabled=yes tagged=BRIDGE,ether5,ether6,ether7,ether8,ether9,sfp1 vlan-ids=1000
add bridge=BRIDGE disabled=yes tagged=BRIDGE,ether5,ether6,ether7,ether8,ether9,sfp1 vlan-ids=1100
add bridge=BRIDGE disabled=yes tagged=BRIDGE,ether5,ether6,ether7,ether8,ether9,sfp1 vlan-ids=1200
add bridge=BRIDGE disabled=yes tagged=BRIDGE,ether5,ether6,ether7,ether8,ether9,sfp1 vlan-ids=1300
add bridge=BRIDGE disabled=yes tagged=BRIDGE,ether5,ether6,ether7,ether8,ether9,sfp1 vlan-ids=1400
add bridge=BRIDGE disabled=yes tagged=BRIDGE,ether5,ether6,ether7,ether8,ether9,sfp1 vlan-ids=1500
add bridge=BRIDGE disabled=yes tagged=BRIDGE,ether5,ether6,ether7,ether8,ether9,sfp1 vlan-ids=1600
add bridge=BRIDGE disabled=yes tagged=BRIDGE,ether5,ether6,ether7,ether8,ether9,sfp1 vlan-ids=1700
/interface detect-internet
set internet-interface-list=WAN wan-interface-list=WAN
/interface dot1x client
add eap-methods=eap-mschapv2 identity=user1 interface=WAN1
/interface ethernet switch vlan
add independent-learning=yes ports=switch2-cpu,ether6,ether7,ether8,ether9 switch=switch2 vlan-id=1000
add independent-learning=yes ports=switch2-cpu,ether6,ether7,ether8,ether9 switch=switch2 vlan-id=99
add independent-learning=yes ports=switch2-cpu,ether6,ether7,ether8,ether9 switch=switch2 vlan-id=100
/interface list member
add interface=WAN1 list=WAN
add interface=WAN2 list=WAN
add interface=WAN3_LTE list=WAN
add interface=VLAN_99 list=VLAN
add interface=VLAN_100 list=VLAN
add interface=VLAN_200 list=VLAN
add interface=VLAN_300 list=VLAN
add interface=VLAN_400 list=VLAN
add interface=VLAN_500 list=VLAN
add interface=VLAN_600 list=VLAN
add interface=VLAN_700 list=VLAN
add interface=VLAN_800 list=VLAN
add interface=VLAN_900 list=VLAN
add interface=VLAN_1000 list=VLAN
add interface=VLAN_1100 list=VLAN
add interface=VLAN_1200 list=VLAN
add interface=VLAN_1300 list=VLAN