You have to add bridge1 interface as tagged port to all relevant VLANs under /interface bridge vlan.

Thanks a lot, you nailed it!
I don't understand why the bridge would need to be part of each vlan for dhcp to work, but whatever - it works

Hi guys I am sorry to use up your precious time, I couldn't figure out what is wrong with my new setup I got a new CCR2004-16G-2S+ and decided to start from scratch. I followed the vlan guide here (because CCR2004 has two switch chips), which doesn't show how to add DHCP servers, so I interpolated i...

Thanks for your input! The IP firewall might have been an attempt for allowing a specific vlan-to-vlan connection that is exposed externally and uses port forwarding in the firewall. ;-) I held back from a total reset because there are quite a few things on that network online 24/7. I guess the easi...

Hey, yeah I would be glad if you could shed some light on this. The hardware switch config at least interferres with the bond, any other setting does not work. I expected to end up with an untagged bond, but the vlan on the bond interface seems to act as a default vlan. The initial configuration is ...

Thanks for self-answering, it helped me solve the same problem, which I got when I wanted to add a new device with LCAP/802.3ad support. I figured it out without resetting the device, but it does not make sense to me. IMO these two ports should emit packages with the VLAN ID still present, but they ...

Thanks. I have seen the wiki, but the examples there are incomplete and don't work without additional configurations (e.g. IPs or trunk bridge, if you have more than one switch chip). This is really annoying for beginners. However, I recreated the configuration on the "main router" and now...

eth6 and eth4 are trunks too, right? so why are they on "always strip"? doesn't that make them access ports?

In my configs

It would really be awesome to see an export of a working VLAN example in this forum!

Hi guys I have an RB2011U (which is not a CRS device) as router, which has a netgear GS108T switch and an hAPlite (acting as a switch) connected. There are two VLAN 40 and 80 on the router, they work just fine on the access ports of this router. However, when I try to connect the hAPlite or the netg...

the "Switching without bridging" tutorial really helped me setting up VLANs. I'm still noob, so take everything I say with a grain of salt. isn't eth1 the first port? and I guess thats your "outside world", probably the modem? You put the master port of your switch to eth1, I thi...

I found the error after ages of trial-and-error: The switch-cpu1 and switch-cpu2 need to have the vlan table mode set to anything but disabled.

Thanks everyone for no single reply though, you guys really helped not

Sigh, I guess keeping it short makes helping an endless ping-pong game, but providing too much discourages everyone from reading it too :? I kept the standard bridge ("bridge-main" the one without VLAN tag) in order to not brick the configuration. Is that incorrect? So far I managed to get...

Funnily enough, my phone can connect to the intranet-wireless on the hAP lite and is correctly assigned an IP from that vlan (10.10.10.x). So I guess the config on the main router isn't entirely wrong. I suspect I did something wrong with the switch and the bridge there, but I'm too noob to see it :...

Hi guys I am quite lost in the configuration jungle and would be very happy about any input/help :) I recently got an RB2011UiAS-2HnD and an RB941-2ND-TC (aka Home AP Lite). There is also an Netgear GS108-T around, but that one is not relevant for my question. What I want to achieve is splitting my ...