I"m trying a simple setup

port 2 of the CCR is connected to a switch that is configured as 802.1q trunk with several vlan
on the CCR is made a number of vlan interfaces, configured ip address for each vlan interface and applied vlan interface to port 2
I connect a laptop to the same switch that is configured as an access port in one of the vlan, configure ip address from the correct ip range and try to ping the ip interface on the CCR. This does not work. I can only make it work by configuring a bridge, assign everything to the bridge (physcial port 2 + vlan interfaces).

My question, do you need to configure a bridge to make .1q trunking work?

You should not have to use a bridge. Are you sure that the switch is configured correctly?

You should not have to use a bridge. Are you sure that the switch is configured correctly?

will check my switch config again

thx

Hello everyone. I am having difficulties with Vlans as it pertains to a CCR1036, EoIP tunnel, Trunk ethernet port and an RB3011.

Here is what we are trying to do. Create a VLAN trunk from a remote office that has an RB3011 that will hand off a single port trunking 8 vlans on it, to an CCR1036. The CCR will need to trunk the vlans from this EoIP tunnel as well as a couple other remote offices with vlans, down the 10G trunk. Diagram below.

I can get all vlans on. the CCR trunk port to trunk to an EoIP. tunnel, but I can't seem to select. specific Vlans that would be used. on an individual EoIP tunnel trunk.

Any ideas on how this is accomplished? I also have another set of EoIP tunnels that are on this CCR that send untagged traffic from other Vlans to individual tunnels elsewhere. Can't disrupt those. This CCR is in semi-production state. The bridge we are working on the the "lab-br" and the temporary trunk port on the CCR is ether1. It carries the temporary vlans used to lab this before we use it on the production offices. Those vlans currently are 112-121.

Config snipit.
CCR:

# jan/29/2020 15:07:55 by RouterOS 6.46.2
# software id = YVTK-3WE3
#
# model = CCR1036-8G-2S+
# serial number = A7FC0B0BC986
/interface bridge
add mtu=1500 name=MV300-BR
add mtu=1500 name=Cloud-BR
add mtu=1500 name=Netbackup-BR
add mtu=1500 name="Office LAN-BR"
add ingress-filtering=yes mtu=1500 name=lab-br vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] comment="LAB trunking test interface.Vlans 112-121 trunked on this port."
/interface eoip
add comment="EoIP tunnel to Jim's office for corp Office LAN" !keepalive local-address=x.x.225.148 mac-address=02:DD:81:25:E8:EE \
mtu=1500 name=eoip-Cloud remote-address=pwy.dynamic.someoffice.com tunnel-id=0
add comment="MV300 LAN" !keepalive mac-address=02:78:EF:58:AA:5A mtu=1500 name=eoip-MV300 remote-address=x.x.29.34 \
tunnel-id=300
add comment="EoIP tunnel to Jim's office for netbackup network." !keepalive local-address=x.x.225.148 mac-address=\
02:C2:D9:F9:AD:25 mtu=1500 name=eoip-Netbackup remote-address=pwy.dynamic.someoffice.com tunnel-id=5
add !keepalive local-address=x.x.225.148 mac-address=02:7A:13:B6:AE:A8 mtu=1500 name=eoip-Office-LAN remote-address=\
pwy.dynamic.someoffice.com tunnel-id=4
add !keepalive local-address=x.x.225.148 mac-address=02:78:B1:F7:2E:2C mtu=1500 name=eoip-lab remote-address=x.x.253.129 \
tunnel-id=112
add !keepalive local-address=x.x.225.148 mac-address=02:08:79:E9:25:FD mtu=1548 name=eoip-trunk-jim remote-address=\
pwy.dynamic.someoffice.com tunnel-id=10
/interface vlan
add comment="Cloud Vlan" interface=sfp-sfpplus1 name=vlan103 vlan-id=103
add comment="Office LAN" interface=sfp-sfpplus1 name=vlan104 vlan-id=104
add interface=lab-br name=vlan112 vlan-id=112
add interface=lab-br name=vlan113 vlan-id=113
add comment="Cloud MV300 LAN" interface=sfp-sfpplus1 name=vlan353 vlan-id=353
add comment="Tunnel01 public IP" interface=sfp-sfpplus1 name=vlan449 vlan-id=449
add comment="Netbackup Vlan" interface=sfp-sfpplus1 name=vlan595 vlan-id=595
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/interface bridge port
add bridge=Cloud-BR interface=vlan103
add bridge=Cloud-BR interface=eoip-Cloud
add bridge="Office LAN-BR" interface=eoip-Office-LAN
add bridge=Netbackup-BR interface=eoip-Netbackup
add bridge=Netbackup-BR interface=vlan595
add bridge="Office LAN-BR" interface=vlan104
add bridge=MV300-BR interface=eoip-MV300 pvid=353
add bridge=MV300-BR interface=vlan353 pvid=353
add bridge=lab-br ingress-filtering=yes interface=eoip-lab
add bridge=lab-br interface=ether1
/interface bridge vlan
add bridge=lab-br tagged=eoip-lab,ether1 vlan-ids=112-113

RB3011:

# jan/05/1970 05:10:49 by RouterOS 6.43.2
# software id = DTFE-IQ9D
#
# model = RouterBOARD 3011UiAS
# serial number = 8EEE091B17E1
/interface bridge
add name=bridge1-br
/interface eoip
add !keepalive local-address=x.x.253.129 mac-address=02:D1:BD:75:08:20 mtu=1500 name=eoip-tunnel01 remote-address=\
x.x.225.148 tunnel-id=112
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/interface bridge port
add bridge=bridge1-br interface=eoip-tunnel01
add bridge=bridge1-br interface=ether2

You should really start a new topic rather than bumping a not particularly related seven year old thread.

A bridge has two aspects - a 'switch part' which handles connections to interfaces, and an 'interface part' which passes traffic from the switch part to other CPU processes. So, to use the vlan112 and vlan113 interfaces on the Mikrotik the configuration should be:
/interface bridge vlan
add bridge=lab-br tagged=lab-br,eoip-lab,ether1 vlan-ids=112-113

This should not affect traffic between ether1 and the EoIP tunnel, however the bridge and tunnel MTU should be 1504 to accommodate a VLAN tag plus full-sized ethernet frame. IIRC there may be issues with VLAN-aware bridges and some tunnels, although possibly not EoIP tunnels.