Untagged VLAN

[delid4ve]

So ive set up a few untagged VLANs before on netgear products but im struggling to find definative answers with a mikrotik.

Please excuse my lack of understanding here.

I have multiple subnets on interfaces that are fire-walled at layer 3. Does this mean that they are automatically isolated at layer 2?

None of the interfaces go to any hardware that is VLAN aware, so all ports would have to be untagged. My understanding is that on egress the traffic would be untagged, then on ingress the traffic would be tagged so that it would go to the right interfaces where it would again egress untagged.

How would i achieve this? (if im not barking up the wrong tree )

 

[Dreamslacker]

Regardless of switch or brand, all access (untagged) ports on a specific VLAN are able to communicate with each other. It's basically like grouping and separating ports into virtual separate switches - hence, Virtual LAN.

It depends on what Mikrotik equipment you are working with.

The SwOS and RouterOS switches differ in terminology and the way the VLANs are configured.

For SWoS switches:
Go to VLAN Tab - for the relevant ports:
Set VLAN Mode to Enabled.
Set Default VLAN ID to relevant VLAN ID.
Egress - Always Strip.

On the CRS (RouterOS) switches:
You add the access/ untagged port(s) to the relevant VLAN ID.
Then go to Ingress VLAN translation - for the port(s) add a translation from Customer-VID "0" to New Customer-VID 'VLAN-ID".
Do not add the port(s) to Egress translation - that is meant for VLAN trunk ports.