I need to configure a CRS109-8G-1S (RouterOS 7.7) to have:
- some port assigned to an untagged VLAN ("access port")
- some port assigned to tagged + untagged VLANs ("trunk" port)
- the routerOS may work as router and firewall between this VLANs
- the traffic intra-vlan may be offloaded
- the RouterOS may offer DHCP server to each VLAN
Is this possible? I tried with many different bridges (one for every VLAN) to bind many DHCP servers to different VLAN, but the ethernet traffic seems not isolated (every port can reach every other port, via cpu1 interface I think).
I tried using a single bridge, as suggested here https://help.mikrotik.com/docs/pages/vi ... bridPorts) but the problem is to assign different DHCP servers to different VLANs ( I cannot find a way to bind DHCP Server to VLANs in this scenario).
What is the right way to have this? Basically I need only functions of a L3 switch: tagged/untagged vlan on ports, routing, basic firewall filtering.
thanks