https://help.mikrotik.com/docs/display/ ... tupExample
My uplink port is a trunk with native/untagged vlan of 100.
My management interface is Vlan101.
Assigning ipv4 (static) to Vlan101 interface works as expected. However setting SLAAC on in the ipv6 settings (accept-router-advertisements=yes) takes advertisements on the UNTAGGED vlan and assigns them to my vlan 101 interface!!!
Here is my "/export hide-sensitive":
Code: Select all
[admin@MikroTik] > export hide-sensitive
# jan/02/1970 00:55:35 by RouterOS 7.6
# software id = IIBP-GWHC
#
# model = RB2011UiAS-2HnD
# serial number = 63FB05144B00
/interface bridge
add name=bridge1 protocol-mode=none
/interface wireless
set [ find default-name=wlan1 ] ssid=MikroTik
/interface vlan
add interface=bridge1 name=Vlan101 vlan-id=101
/interface ethernet switch port
set 0 vlan-mode=secure
set 1 default-vlan-id=100 vlan-mode=secure
set 2 vlan-mode=secure
set 3 vlan-mode=secure
set 4 vlan-mode=secure
set 5 default-vlan-id=100 vlan-mode=secure
set 6 vlan-mode=secure
set 7 vlan-mode=secure
set 8 vlan-mode=secure
set 9 vlan-mode=secure
set 10 vlan-mode=secure
set 11 vlan-mode=secure
set 12 vlan-mode=secure
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/port
set 0 name=serial0
/interface bridge port
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5
add bridge=bridge1 interface=ether6
add bridge=bridge1 interface=ether7
add bridge=bridge1 interface=ether8
add bridge=bridge1 interface=ether9
add bridge=bridge1 interface=ether10
/ipv6 settings
set accept-redirects=no accept-router-advertisements=yes forward=no
/interface ethernet switch vlan
add independent-learning=yes ports=switch1-cpu,ether1,ether5 switch=switch1 vlan-id=10
add independent-learning=yes ports=switch1-cpu,ether1,ether5 switch=switch1 vlan-id=16
add independent-learning=yes ports=switch1-cpu,ether1,ether5 switch=switch1 vlan-id=90
add independent-learning=yes ports=switch1-cpu,ether1,ether5 switch=switch1 vlan-id=99
add independent-learning=yes ports=switch1-cpu,ether1,ether5 switch=switch1 vlan-id=100
add independent-learning=yes ports=switch1-cpu,ether1,ether5 switch=switch1 vlan-id=101
add ports=switch2-cpu switch=switch2 vlan-id=10
add ports=switch2-cpu switch=switch2 vlan-id=16
add ports=switch2-cpu switch=switch2 vlan-id=90
add ports=switch2-cpu switch=switch2 vlan-id=99
add ports=switch2-cpu switch=switch2 vlan-id=100
add ports=switch2-cpu switch=switch2 vlan-id=101
add ports=switch2-cpu switch=switch2 vlan-id=102
/ip address
add address=192.168.131.39/27 interface=Vlan101 network=192.168.131.32
/ip route
add disabled=no dst-address=0.0.0.0/0 gateway=192.168.131.33 routing-table=main \
suppress-hw-offload=no
However if I ping the slaac address it if course doens't work as the subnet is wrong!
My personal linux computer is in Vlan100 (eg: untagged for the rb2011):
Code: Select all
rob2@daisy:~$ ip -6 addr show dev wlan0 | grep fd4a
inet6 fd4a:ea50:349f:a0:2286:f3f7:35d1:c5d8/64 scope global temporary dynamic
inet6 fd4a:ea50:349f:a0:8038:e68d:852c:898c/64 scope global dynamic mngtmpaddr noprefixroute
Here is the slaac address of the vlan101 interface:
Code: Select all
[admin@MikroTik] > /ipv6/address/print
Flags: D - DYNAMIC; G, L - LINK-LOCAL
Columns: ADDRESS, INTERFACE, ADVERTISE
# ADDRESS INTERFACE ADVERTISE
0 DL fe80::e68d:8cff:fe3c:1e9/64 bridge1 no
1 DL fe80::e68d:8cff:fe3c:1e9/64 Vlan101 no
2 DG fd4a:ea50:349f:a0:e68d:8cff:fe3c:1e9/64 Vlan101 no
However Vlan101 seems to function fine with static ipv4. I can ping it, connect to it, etc.
If I turn off RA in ipv6 settings and assign it static ip, everything works fine. Any idea why untagged RA's (vlan 100) coming into the bridge are being sent to Vlan101 interface?