Mikrotik Bridge VLAN Filtering - Software vs Hardware

[@kaltek797]

Hi commenters - please note that as of ROS 7.X, Bridge VLAN Filtering works in hardware on the RB4011 now (as well as the RB5009).

[@john_elliott]

Thanks for going back to update this. I appreciate all the info you've pulled together to be able to make the spreadsheet and those comments and I like your perspective on new users, as I'm one of those trying to move away from the "common L2 misconfiguration" of vlans and ports in multiple bridges.

[@n8lbv]

Thanks for mentioning this.. I just posted a very frustrated comment (not frustrated with you or your video) it was VERY good. Also I am currently only testing and trying to figure out RB3011 and how to get simple hardware VLAN working on two ports on same switch chip (not have all traffic between two devices on same VLAN and switch chip go through CPU).. All the settings (seem) to be there but have been unable to get it to work. VLAN filtering checkmark on bridge config works but makes all traffic go through CPU as expected (Latest ROS 7.x)

[@emzy888]

I don't own any of these switches, but I'm considering buying one. This is probably the most straightforward video explaining this rather confusing topic. Thank you!

[@udirt]

Great job making a video like this. I crave deeper stuff I can't look at myself anymore and it's so de-energizing only finding shallow clickbait when searching to learn.

[@yeahnahsorry3433]

Thank you, this was very helpful. I was stumped for a few days trying to configure vlans on my new CRS328, yours was the first example where it really clicked for me. The bit I was missing was tagging the vlans on the bridge itself.

[@kaltek797]

Yeah in my mind it's similar to Cisco IOS for switches except the bridge is *implicit* on Cisco but on Mikrotik you have to be *explicit*

[@djwolf37]

Please do more of these mikrotik videos. This was very helpful and easy to understand.

[@richardfuller7506]

Thank you for the explanation. As a noob to routerOS on a CRS1xx switch it proved very informative and useful

[@ccmks]

Thank you for your very educational video. I am trying to configure my CRS326 with all inter-vlan connected to that core switch, instead of using router on a stick method. I learned a lot from this video!

[@Alex-un5tl]

this was a great video, please do more!

[@rubenduarte4909]

Hi Kaltek, Thanks for the video! Will you consider more content like this in the future? As in topics that are commonly done wrong but everyone thinks they are doing them right? Or more obscure topics that everyone should actually know about? Anyways, good video! It was insightful!

[@kaltek797]

I'm no BGP or dynamic routing expert, but I do have some ideas yes. The problem with my darned life at the moment is time. :-/

[@SiBex_ovh]

4:50 RB4011 Bridge\ports - They not have a HW active ? You have one bridge and HW Acc should be active on it, why you not have it active ?. On the end you show/say that RB4011 can be configures in this new/latest CRS3xx vlan way and you use it.. I see the Bridge\Vlan used.. .Thanks for create this video.. I'll use RB4011 for IPSec tunnels and few vlans on it.

[@DimitriPappas]

Brilliant content thanks

[@SavannahTL]

I'm trying to add the Mikrotik Wire Cube to my MST spanning tree. I am lost on how to set it up using vlan filtering for spanning tree... can you make a video on this?

[@SiBex_ovh]

I watch all your videos, Thanks for good content. You can share your Excel and router config ? Those QoS with fasttrack is a good reference configuration.

[@n8lbv]

I am struggling greatly (over a week now) with older Products (RB3011 RB 4011) routers which DO ALSO have switch chips! I have been unable to get VLANS to work at the hardware/chip level. The bridge VLAN filter checkbox works perfectly fine but forces all traffic through the CPU. It makes NO sense that These switch chips can't bridge/switch any VLAN traffic between two ports on the same switch chip. What is the point of a switch chip and all of the switch settings if you can't do anything like this? Simply trying to accomplish the same job a cheap $30 managed switch would normally do + have a trunk port back to the CPU for management and routing if ever needed. SMH- There are many settings for VLAN items in the switch config part of router OS and it makes absolutely no sense that all of these settings would be there if they can't be used. None of this makes any sense and a week of watching videos and reading forum posts has not been definitive or helpful.

[@RickardUddenberg]

How is this relevant to a RB3011?

[@kaltek797]

I'm not *exactly* sure what you're asking, but assuming the question is "how does this behave on an RB3011", it works the same and is configured the same, but the performance is limited by the capabilities of the switch chips, and the interconnects between the switch chips and the processor. There's two links to look at, first is the Block Diagram for the RB3011 where you can see the uplinks from the switch chips are only 1Gb/s (cdn.mikrotik.com/web-assets/product_files/RB3011UiAS-160307123613_160313.png) and the other is a description of what these switch chips (QCA8337) can do: help.mikrotik.com/docs/spaces/ROS/pages/328068/Bridging+and+Switching#BridgingandSwitching-BridgeHardwareOffloading

[@Joshv918]

Id love to pick your brain a bit further.. is there anyone to maybe reach you via email of discord?