RB760iGS + TP-Link Smart Switch, traffic from VLANs on trunk port to access port go the router first
Posted: Sat Aug 06, 2022 4:23 am
This is likely a switch configuration issue, but i wanted to ask here as maybe i have a bad configuracion on the router.
The setup i have a is actually a very simple one, VLAN 1 is untagged on the bridge, this is the router native vlan, and then i added a bunch of different vlans with different networks to the bridge, i enable vlan filtering and added them to the bridge vlans.
I didnt have the correct vlans ids when i did make the diagram, it is 110 and 130
In short, the router sends VLAN 1 as untagged, and VLANS 110, 130 and 140 as tagged on all LAN ports. All PCS are connected to a TP-Link Smart switch that is connected on the port labeled as "switch". This switch is a L2 switch with some L3 features.
The configuration on the switch is also very simple, ports 1 to 4 are trunk ports, where VLAN1 is untagged and the other VLANS are tagged, then the rest of the ports are access ports, top row is VLAN 110 as untagged and nothing else, they get 192.168.81.x/24 ips, botton row is vlan 130 as untagged and nothing else, they get 192.168.80.x/24 ips.
All the pcs on the access ports of the same vlan/network can send traffic to each other whiout going to the router, as they should, but any any device that is connected to the trunk port and is set to use lets say VLAN 110 with a 192.168.81.x ip should be able to send traffic to the others pcs of the same vlan and network that are connected to the access port whiout going to the router, but it does not, it goes tot he router, it does not shows on tracert, but cpu usage fires up and i can see the traffic on the vlan interface. Proxmox VMs do this and if i connect any windows pc to the trunk port and i set Windows to use VLAN 110 on the NIC, it gets the correct ip but it also have the same problem, traffic instead of going dirrectly to the pc on the access port, it goes to the router, then it returns to the switch.
I have no idea of what could be the issue, as this should work.
The setup i have a is actually a very simple one, VLAN 1 is untagged on the bridge, this is the router native vlan, and then i added a bunch of different vlans with different networks to the bridge, i enable vlan filtering and added them to the bridge vlans.
I didnt have the correct vlans ids when i did make the diagram, it is 110 and 130
In short, the router sends VLAN 1 as untagged, and VLANS 110, 130 and 140 as tagged on all LAN ports. All PCS are connected to a TP-Link Smart switch that is connected on the port labeled as "switch". This switch is a L2 switch with some L3 features.
The configuration on the switch is also very simple, ports 1 to 4 are trunk ports, where VLAN1 is untagged and the other VLANS are tagged, then the rest of the ports are access ports, top row is VLAN 110 as untagged and nothing else, they get 192.168.81.x/24 ips, botton row is vlan 130 as untagged and nothing else, they get 192.168.80.x/24 ips.
All the pcs on the access ports of the same vlan/network can send traffic to each other whiout going to the router, as they should, but any any device that is connected to the trunk port and is set to use lets say VLAN 110 with a 192.168.81.x ip should be able to send traffic to the others pcs of the same vlan and network that are connected to the access port whiout going to the router, but it does not, it goes tot he router, it does not shows on tracert, but cpu usage fires up and i can see the traffic on the vlan interface. Proxmox VMs do this and if i connect any windows pc to the trunk port and i set Windows to use VLAN 110 on the NIC, it gets the correct ip but it also have the same problem, traffic instead of going dirrectly to the pc on the access port, it goes to the router, then it returns to the switch.
I have no idea of what could be the issue, as this should work.
Code: Select all
/interface bridge
add admin-mac= auto-mac=no ingress-filtering=no name=bridge vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] name=ether1-Modem
set [ find default-name=ether2 ] name=ether2-DVR
set [ find default-name=ether3 ] name=ether3-Switch
set [ find default-name=ether4 ] name=ether4-CPE
set [ find default-name=ether5 ] name=ether5-EAP
set [ find default-name=sfp1 ] disabled=yes name=sfp1-Switch
/interface vlan
add interface=bridge name=vlan1-Empleados vlan-id=110
add interface=bridge name=vlan3-Ventas vlan-id=130
add interface=bridge name=vlan4-Servicio vlan-id=140
/ip pool
add name=admin ranges=192.168.90.50-192.168.90.254
add name=ventas-pool ranges=192.168.80.30-192.168.80.254
add name=empleados-pool ranges=192.168.81.10-192.168.81.254
add name=servicio-pool ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=admin interface=bridge name=Admin
add address-pool=empleados-pool interface=vlan1-Empleados name=Empleados
add address-pool=ventas-pool interface=vlan3-Ventas name=Ventas
add address-pool=servicio-pool interface=vlan4-Servicio name=Servicio
/ip address
add address=192.168.90.1/24 comment=Admin interface=bridge network=192.168.90.0
add address=192.168.88.1/24 comment=Servicio interface=vlan4-Servicio network=192.168.88.0
add address=192.168.80.1/24 comment=Ventas interface=vlan3-Ventas network=192.168.80.0
add address=192.168.81.1/24 comment=Empleados interface=vlan1-Empleados network=192.168.81.0
/interface bridge port
add bridge=bridge ingress-filtering=no interface=ether2-DVR
add bridge=bridge ingress-filtering=no interface=ether3-Switch
add bridge=bridge ingress-filtering=no interface=ether4-CPE
add bridge=bridge ingress-filtering=no interface=ether5-EAP
add bridge=bridge ingress-filtering=no interface=sfp1-Switch
/interface bridge vlan
add bridge=bridge tagged=bridge,ether4-CPE,ether5-EAP,ether3-Switch vlan-ids=\
110,130,140
/interface list member
add interface=bridge list=LAN
add interface=ether1-Modem list=WAN
add interface=vlan1-Empleados list=LAN
add interface=vlan3-Ventas list=LAN
add interface=vlan4-Servicio list=LAN
/ip address
add address=192.168.90.1/24 comment=Admin interface=bridge network=192.168.90.0
add address=192.168.88.1/24 comment=Servicio interface=vlan4-Servicio network=192.168.88.0
add address=192.168.80.1/24 comment=Ventas interface=vlan3-Ventas network=192.168.80.0
add address=192.168.81.1/24 comment=Empleados interface=vlan1-Empleados network=192.168.81.0
/ip dhcp-server network
add address=192.168.80.0/24 boot-file-name=efi/snponly.efi comment=Ventas gateway=192.168.80.1 next-server=\
192.168.88.2
add address=192.168.81.0/24 comment=Empleados gateway=192.168.81.1
add address=192.168.87.0/27 comment="Ventas Gaming" gateway=192.168.87.1 netmask=24
add address=192.168.88.0/24 boot-file-name=efi/snponly.efi comment=Servicio gateway=192.168.88.1 next-server=\
192.168.88.2
add address=192.168.90.0/24 comment=Admin gateway=192.168.90.1 next-server=192.168.88.2
(and explained how to obtain it in the concise text form).