I currently setup access port with vlan10 that i connect directly to lets say HP server and looks good there
Now i want to be able to manage the HP server using iLO and want to use same network connection from switch for iLO networking also
iLO network is vlan11

I am assuming i need to change from access port to trunk port, is that so?
And then each the iLO network will work by using the vlan11 network while the regular server networking will also work using the vlan10 network
Is this a good assumption or is there a way to do this on mikrotik device?

That is a Hybrid setup.
You can have an access port on VLAN10 and at the same time the same port can be a Trunk Port for VLAN 11.
Notice though, a trunk Port carries Tagged Traffic, so the port will tag the packets on egress ( the ones that do not belong on VLAN 10 ) with VLAN ID 11. That means your Server should be able to understand that Tagged traffic, i.e. it should be configured in a proper way too...

So everything is fine currently with just vlan10 with regular access port setup
so now i want to allow vlan11 for iLO remote management
so just want to know what to change to achieve this

Good to know proper way to do this on mikrotik
this is a very common setup using iLO network on same network as the server traffic
just want to know how to do this on mikrotik switch

It depends on the Switch model... So what device are you using ?

switch is crs312_4c_8xg_rm

ok, you can use Bridge VLAN filtering.
Start from here viewtopic.php?t=143620
And here https://help.mikrotik.com/docs/display/ ... VLAN+Table

Great thanks
this is what am after https://wiki.mikrotik.com/wiki/Manual:I ... d_Ports.29
just as i assumed it will be, just needed to add the ports as tagged also
very simple

thanks

Only issue i see is no way to control what VLANs should be allowed per interface port
Lets say i want

port5 to have vlan10 untagged and vlan11 tagged so it can allow both vlans on same port
port6 to have vlan10 untagged, same as access port but for vlan10
port7 to have vlan11 untagged, same as access port but for vlan11

am not sure that configuration can do this, can it?
because things are controlled from bridge VLANs not from the interface ports

An access port, for example, will strip the VLAN tag of the packet matching the VID of the port on egress.
So you can't have port etherX both Access Port for VLAN 10 and Tagged Port for VLAN10.

So a hybrid port only has one untagged vlan (and as many tagged vlans as required)

As long as they do not match.
In practice, it won't let you add the same port as tagged and untagged anyways...

Code: Select all

/bridge port ports
add bridge=bridge interface=ether5  pvid=10  {hybrid}
add bridge=bridge interface=ether6  pvid=10  {access}
add bridge=bridge interface=ether7  pvid=11  {access}

/interface bridge vlan
add bridge=bridge tagged=bridge,ether5  untagged=ether7 vlan-ids=11
add bridge=bridge tagged=bridge  untagged=ether5,ether6 vlan-ids=10

ok got it now, thanks