Chapter 3 of 11 · MikroTik MTCSWE

VLANs

Tagging, VLAN interfaces, router on a stick, chip VLANs, bridge VLAN filtering, MAC and protocol VLANs and QinQ.

  • 6topics
  • 28 minfast track
  • 4diagrams and exhibits

Topics in this chapter

Take them in order, or jump to the one you need.

  1. 1802.1Q and 802.1ad VLAN Tagging ConceptsLearn how 802.1Q tags separate VLANs on one link, what the tag fields mean, how 802.1ad adds a service tag, and how RouterOS…Diagram5 min
  2. 2VLAN Interfaces, VLAN Bridging and Router on a StickUse RouterOS VLAN interfaces to tag and untag traffic, bridge VLANs to access ports, and route between VLANs over one trunk with…Diagram5 min
  3. 3Port Based VLAN in Basic Switch ChipsConfigure port based VLANs in the switch chip menu of RouterBOARD and CRS devices using the VLAN table, vlan-mode, vlan-header…4 min
  4. 4VLANs in Bridge Interfaces with VLAN FilteringConfigure port based VLANs with RouterOS bridge VLAN filtering using pvid, frame types, the bridge VLAN table, and a tagged…Diagram5 min
  5. 5MAC Based and Protocol Based VLANLearn how a switch chip can assign a VLAN from the source MAC address or the Ethernet protocol of a frame, where this helps, and…4 min
  6. 6QinQ with Bridge VLAN Filtering and VLAN InterfacesConfigure QinQ on RouterOS with 802.1ad service tags, using the bridge ether-type with VLAN filtering or stacked VLAN interfaces…Diagram5 min

About this chapter

What this chapter covers

The VLANs chapter is the largest in the syllabus, and it covers every way RouterOS separates traffic at Layer 2.

It starts with the tag itself, then shows the three places where VLANs can be configured: on VLAN interfaces in the CPU, in the bridge, and in the switch chip. It finishes with the less common classification methods and with QinQ.

Thirteen syllabus topics are grouped into six pages. Two topic names repeat in the syllabus, and each time they belong to a different method.

How the topics fit together

The pages start with the theory and then follow the history of the tools.

802.1Q tagVLAN ID in the frameused byVLAN interfaceCPU and routingreplaced byBridge VLAN filteringoffloadedSwitch chipVLAN tableorMAC and protocol ruleschip classificationstacked asQinQservice tags

Each method suits different devices:

  • VLAN interfaces are flexible and good for routing, but run in the CPU.
  • Chip VLAN tables are fast and found on older RouterBOARD and CRS1xx and CRS2xx models.
  • Bridge VLAN filtering is the current approach, and it is hardware offloaded on supported chips.
  • MAC and protocol rules classify frames by content, and they are rare.
  • QinQ adds a provider tag around customer VLANs.
Note

Never mix two VLAN methods on the same ports. Pick the one that matches the device, and use it everywhere on that device.

How to use these pages

Each topic page has the same shape, so you can skim for what you need.

  • What it is: the idea in plain words.
  • How it works: the mechanism, with diagrams and example commands.
  • What to remember for the exam: the facts to memorise.
  • Common mistakes: the classic traps.
  • Check yourself: three questions to test your understanding.

Read the tagging page first, because every other page depends on it. Then build the same two VLAN lab with each method, one after the other, and compare the commands. Do the hands on work with a spare port for management, so that a mistake does not lock you out.

Ready for more practice?

The full MikroTik MTCSWE question bank has 484 questions, with timed practice exams and an explanation for every answer.

This study guide is independent and is not affiliated with, endorsed by, or sponsored by MikroTik. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.