What I can pass along is failure!
I tried to setup my vlan11
The biggest hurdle is that the bridgevlan rules would not let me add vlan11 to both rules so perhaps my rule structure is wrong and before I get to the specific rules will quick chat about process.
1. changed IP address for my homelan from interface homebridge to vlan11
2. changed DHCP SERVER for my homelan from interface homebridge to vlan11
Keeping it real simple
To reiterate bridge and port structure........
bridge is named homebridge pvid defaults to 1, ingress filtering=yes
ether2 is trunk port pvid defaults to 1, ingress filtering=yes
ether3 is trunk port pvid defaults to 1, ingress filtering=yes
/ip bridge vlan
add bridge=homebridge tagged=homebridge,eth2 vlan-ids=30,40,45,100,200,666 (tried to add 11)
add bridge=homebridge tagged=homebridge,eth3 vlan-ids=33,77,99 (tried to add 11)
I tried to add vlan-id 11 to both rules and my router Refused, the audacity, the unmitigated gall, to allow me to place 11 on both, as if, I dont know what I am doing LOL
In retrospect what a turkey move!!
the right setup is as follows, off to see if it works.......
add bridge=homebridge tagged=homebridge,eth2 vlan-ids=30,40,45,100,200,666
add bridge=homebridge tagged=homebridge,eth3 vlan-ids=33,77,99
add bridge=homebridge tagged=homebridge,eth2,eth3 vlan-id=11
That seemed to work just fine this time........ Now the issue is I have three managed switches in the mix and two CapACs, that are using pvid=1 for homelan traffic.
This is going to get tricky but for my dlink and netgear, I am assuming i will have to assign all non trunk ports as access ports vice hybrid or any other name and assign a pvid of 11.
Is that about right?? (and of course add 11 as a tagged port on the trunk ports). If I dont many other brands will assign pvid=1 to untagged ports which we dont want.
@mkx for my capACs......... easy enough to add vlan11 to the capac bridge. My issue is how to allow homelan traffic. Before it kind of automagically was using the default pvid of the bridge (1).
How I think I have to be creative for my wifi homelan connection part.
/interface bridge vlan
add bridge=capbridge tagged=eth1, untagged=wifi-guest(vWLAN) vlan-id=100
add bridge=capbridge tagged=eth1,untagged=smartdeviceswifi(2.4ghz_wlan) vlan-id=30
add bridge=capbridge tagged=eth1, untagged=homewifi(5ghz_wlan) vlan-id=11
and change my bridgeport setting for homewifi from pvid=1, to pvid=11
(To be clear my bridge port setup as each wlan or vwlan is being assigned a PVID as per the new setup method, vice the pvid the old way in the wireless setup.)
@mkx @pcunite, I am already appreciating the new method for ease of changes and consistency.
One nagging question (pun intended) is what happens with pvid=1.
The reason I ask is because,
pvid=1 still exists as
the router bridge by default is assigned pvid=1 (but is no longer tied to my homelan which was shifted to vlan11)
the capac bridge by default is assigned pvid=1
my SwOS switch still has pvid=1 on the trunk ports
my dlink switch still has vlan-id=1 on trunk ports and unused ports
my netgear switch still has vlan-id=1 on trunk ports and unused ports.
I guess my question is what is the impact of this.
a. do I still neeed vlan1 to talk to these devices?
b. is there a security issue in that all devices are accessible via vlan1
c. should I apply ingress filtering (only allow vlan tagged packets at trunk ports thus stopping untagged packets??)