Page 1 of 1

Send two untagged vlan from trunk uplink to access port..

Posted: Wed Oct 24, 2018 9:53 am
by gard
Hello!
I am sorry for my bad English.
I need send two vlan in "untagged" mode to access port.

I have CRS317.. in sfp16 comes two tagged vlan: 1-internet and dhcp-addressing, 4 - iptv multicast.
My trying One.
I created for physical iface sfp16 two vlans: lan1 pvid=1, lan4 pvid=4. After I created bridge (vlan-filtering=no) and add into: client port sfp14, vlan1, vlan4. I have solution my problem and loop to up swith. After added rule into bridge Filter: drop forwarding traffic between vlan1 and vlan4. After it solution just work. It fine! But... traffic moved and processed in CPU, not switch chip.

My trying Two.
I need traffic processed wired speed, so created bridge br0 (vlan-filtering=yes) and two vlan into bridge. Code:
/interface bridge
add igmp-snooping=yes name=br0 protocol-mode=none vlan-filtering=yes
/interface bridge port
add bridge=br0 interface=sfp-sfpplus16
add bridge=br0 interface=sfp-sfpplus14
/interface bridge vlan
add bridge=br0 tagged=sfp-sfpplus16 untagged=sfp-sfpplus14,br0 vlan-ids=4
add bridge=br0 tagged=sfp-sfpplus16 untagged=sfp-sfpplus14,br0 vlan-ids=1
/ip address
add address=10.x.x.x/x interface=br0 network=10.x.x.x
Rules added, but for interface sfp14 in br0 PVID=1 and I have this situation: while pvid=1 - internet and adressing in network work, but not iptv. If I setup pvid=4 for sfp14 - multicast iptv now work, but internet and addressing - not work.

Is there a solution? Exist 2 vlan in uplink port and it needs to be forwarded to access ports (untagged mode, simulate unmanaged ethernet switch)

Re: Send tvo untagged vlan from trunk uplink to access port..

Posted: Wed Oct 24, 2018 9:55 pm
by bramwittendorp
You can only have 1 untagged vlan on a port or trunk. All additional ports need to be tagged.

Re: Send tvo untagged vlan from trunk uplink to access port..

Posted: Wed Oct 24, 2018 10:34 pm
by mkx
If you want to simulate unmanaged switch, then you have to relay both VLANs tagged. Unmanaged switch will send frames regardless of VLAN tag and will most certainly not untag frames.

Re: Send tvo untagged vlan from trunk uplink to access port..

Posted: Thu Oct 25, 2018 7:08 am
by gard
Thanks, I understand, need add unmanaged switch after mikrotik.
I think maybe use mac-based vlan classify, but it notgood for my situation..
I will continue the search for a solution...

Re: Send tvo untagged vlan from trunk uplink to access port..

Posted: Thu Oct 25, 2018 7:58 am
by gard
Hello again!
Solution on the back side:
/interface bridge port
add bridge=br0 interface=sfp-sfpplus16
add bridge=br0 interface=sfp-sfpplus14 pvid=4
...
/interface ethernet switch rule
add mac-protocol=pppoe-discovery new-vlan-id=1 ports=sfp-sfpplus14 switch=switch1
add mac-protocol=pppoe new-vlan-id=1 ports=sfp-sfpplus14 switch=switch1
By default access port - untagged vlan 4 (iptv), for pppoe-discovery and pppoe-session tfaffic from acces-port tagged vlan 1 (mac-based vlan filtering). However, ip-addressing must be in default vlan 4 (iptv), and for pppoe-connects from client traffic going to vlan 1.