Hi,
im wanted to ask this because im now reading about port vlans and bridge vlans and i still not fully understand how bridge vlans work or how to properly configure it. What i have right now i belive is called port vlans.
Im using a RB750GR3 for a office/store with 5 networks, dual wans and L2TP VPN server with ipsec.
There are 5 bridges, one for each network:
Bridge-Admin -> This is were all the admin stuff is connected to diferent servers, some pcs, access points, managed switch... etc
Bridge-Sales -> The main big network were all user computers are pluged in, this is also the network the VPNs clients in offsite locations also running mikrotik routers connects to.
Bridge-Employees -> Internet-only network, mainly for private wifi.
Bridge-Clients -> A hotspot for clients is running here.
Bridge-Cameras -> A Security ip cameras network
Vlan Interfaces:
vlan1-Sales (ID 100)
vlan2-Employees (ID 200)
vlan3-Clients (ID 300)
vlan4-Cameras (ID 400)
All vlan interfaces are attached to "Bridge-Admin" interface.
Bridge ports:
ether-3 and ether-4 on "Bridge-Admin"
ether-5 on "Bridge-Sales"
vlan1-Sales on "Bridge-Sales"
vlan2-Employees on "Bridge-Employees"
vlan3-Clients on "Bridge-Clients"
vlan4-Cameras on "Bridge-Cameras"
(ether1 and 2 are wans)
Switchs:
1) 16-Port gigabit unmanaged switch on ether-3 (admin network)
2) 24-Port gigabit unmanaged switch on ether-5 (sales network)
3) 26-Port 10/100 managed switch on ether-4 (admin network) this is a old one, a 3com 2226 plus but it works.
So ether-4 is acting as a vlan trunk for the managed switch, this switch has untagged ports for all vlans, mainly intended for the ip cameras, low bandwidth devices of the sales network and wired devices of the employees and clients networks,
All my EAP access points are connected to the unmanaged 16 port switch on the admin network on ether3, and they create the wifis attached to the employees and clients vlans.
This configuration is running fine for me and has been for some time, so im wondering if i should investigate into bridge vlans for this application.