3 ms·
Yes, mikrotiks separate bridges, vlans, interfaces. If you want to set ether 3, 4 and 5 to untagged vlan called "Alf" with ID 11, ether 6 to untablled vlan "Bo
by iso1210 5y ago
Yes, mikrotiks separate bridges, vlans, interfaces.
If you want to set ether 3, 4 and 5 to untagged vlan called "Alf" with ID 11, ether 6 to untablled vlan "Bob" (id 12), and ether 7 and 8 to a trunk of both Alf and Bob, you can do
1) Create a bridge for Alf, and a bridge for Bob
2) Assign IPs for them (assuming your mikrotik is the router), and maybe dhcp pools, server etc
3) add ether3, 4 and 5 as bridge ports for Alf, and ether6 for Bob
4) Create a vlan interface on ether7 for Alf with vlanid=11, add to bridge Alf
5) Create a vlan interface on ether8 for Alf with vlanid=11, add to bridge Alf
6) Create a vlan interface on ether7 for Bob with vlanid=21, add to bridge Bob
7) Create a vlan interface on ether8 for Bob with vlanid=21, add to bridge Bob
But the killer is there are two different recommended ways to do it depending on the hardware.
- mindslight 5y agoI haven't looked at my config in a while. It appears I've got a single bridge, and ports get added to it with their VLAN tags (for ingress, I believe) - /interface bridge port add bridge=_bridge interface=sfp-sfpplus1 add bridge=_bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=yes interface=sfp2 pvid=10 But then I also have to define the VLAN ID for the bridge (for egress, I believe) - /interface bridge vlan add bridge=_bridge tagged=sfp-sfpplus1,_bridge, untagged=sfp2 vlan-ids=10 The device is a CRS328-4C-20S-4S+RM. It seems like I am using the other recommended way. Which would make sense because I'm not really using the "router" part of the software, but rather configuring the built in switch chip to do its thing. Looking at the text config now it seems quite sensible, and isn't far from SwOS, Linux CLI, or switch chip datasheets. But I remember getting to that point in the WebUI being somewhat confusing, perhaps due to the alternative in-CPU way you described.
- tguvot 5y agoyou just need to remember that in case you make bridges: - you need to enable hardware offloading for it - different models have different limits on number of hardware offloaded bridges - if it's not hardware offloaded, you run all traffic through cpu and kill throughput
- iso1210 5y agoI tend to work with CCRs, so no hardware offloading - everything runs through the CPU (and normal throughput isn't an issue)
- locusm 5y agoWhats the recommended way to config VLANs if mixing recent Mikrotik router with existing Unifi switches & AP's.