[mflorezm]

Hi Guys,

I am migrating from R8500 to MX4200; and my ISP needs tagged VLANID 100 (PPPoE) and tagged VLANID 101 for VoIp.

Thanks to ho1Aetoo and lexridge, we already know that creating a Wan.100 and using it as WAN interface instead of WAN solved the PPPoE but I can not find the way to connect the VLAN101 on the same WAN and link it LAN1 port as it was working on R8500.

I understand that MX4200 has DSA instead of internatl switch, but it was easy for me to config VLAN´s with the old switch tab.

Attached is my R8500 working VLAN config if anyone can take a look and help me to config VLAN Tagging, Bridging, Bridge VLAN Filtering sections to achieve the same result as the image below.

Thanks,

Mauricio F.

[matjazk]

I guess you only have to create appropriate DSA VLAN filters to direct VLAN101 traffic to LAN port 1. Did you look at First Look: DSA VLAN Filtering [EA8500]?

[mflorezm]

Yes, I did it with no success, so, please any hint will be welcome. Should I create a new br1? thanks.

[matjazk]

It looks like your IP phone was on lan3, with tagged VLAN 101. The equivalent DSA filter would be:

[mflorezm]

Hi matjazk,

Do you mean like the attached screenshot? only with that it did not work. BYW, on MX4200 the voip is plugged on Lan1. Do i have to create tagged VLAN wan.101 and/or lan1.101? do I need to activate the trunking setting? thanks.

[mflorezm]

Hi Again,

This is the only way that partially works. With the attached setup using br1 the ISP dhcp server gave me IP address, but nothing else from there with no comunication (i guess some kind of IP conflict or similar).

Thanks.

MFM

[matjazk]

I was thinking if we follow the logic in "First look: DSA VLAN filtering..." the configuration below seems plausible to me. My intention is to use WAN port as a trunk for VLANs 100 and 101, tagged VLAN 101 on lan1 for VoIP, and untagged traffic (ex-VLAN 100) for the rest.

Note: this is purely hypothetical, only you can test it. Please let me know if this works.

Go to Setup->Networking.

[ho1Aetoo]

@matjazk

So if the WAN port is used for Internet access, it cannot be a bridge member.

A bridge only bridges ports together, e.g., WAN and LAN.

But then there is no protective firewall between them.

So bridge filtering cannot be done with an active WAN port.

(This is possible with an IPTV VLAN, as it generally only transfers VIDEO and AUDIO data that remains within the provider's network).

[ho1Aetoo]

@mflorezm

To simplify the setup, you can try the following... (based on your last screenshot)

Bridging:

Disable VLAN filtering for br0 and br1.

Bridge VLAN filter:

Delete the filter.

Network Configuration br1:

Do not assign an IP address under any circumstances.

Network Configuration lan1:

Set to unbridged and do not assign an IP address.

This should work, but since switching to DSA, things often don't work properly anymore.

[mflorezm]

Hi Guys,

I just want to let you know that thanks to ho1Aetoo and matjazk, now I migrated my VLAN config from R8500(internatl switch) to MX4200(DSA).

Attached are the pictures to achieve the same result using DSA.

Thanks,

Mauricio F.