I want to use hAP lite as simple switch with tagged and untagged traffic (possibly with port isolation),
but the configuration is little bit cryptic for me.
- https://wiki.mikrotik.com/wiki/Manual:B ... _switching
Other devices with built-in switch chip
- https://wiki.mikrotik.com/wiki/Manual:S ... p_Features
router --- tagged vlan 10 --- [ether2]
pc3 ------ untagged ------- [ether3](hAP lite)[ether1] --- untagged and vlan 10 traffic --- (router)
pc4 ------ untagged ------- [ether4]
I want to use hw offloading so just basic configuration as in example above and no vlan filtering.
Ether2 and switch1-cpu are in 'secure' vlan mode and this seems ok.
Ether3 and ether4 has to be in 'fallback' or 'disabled' mode as other modes blocks untagged traffic.
But from description it seems that if I send packet on ether3 with vlan 10 tag then it will be forwarded to ether2.
Is my understanding right or wrong?
Does anyone of you example configuration for this scenario?
Code: Select all
/interface vlan add interface=bridge name=mgmt vlan-id=10 /interface ethernet switch port set 0 vlan-mode=fallback set 1 default-vlan-id=10 vlan-mode=secure set 2 vlan-mode=fallback set 3 vlan-mode=fallback set 4 default-vlan-id=10 vlan-mode=secure /interface bridge port add bridge=bridge interface=ether2 add bridge=bridge interface=ether3 add bridge=bridge interface=ether4 add bridge=bridge interface=ether1 /interface ethernet switch vlan add ports=ether1,ether2,switch1-cpu switch=switch1 vlan-id=10