8/4/23, 10:46 AM SwOS/RB250-RB260-VLAN-Example - MikroTik Wiki

SwOS/RB250-RB260-VLAN-Example
< SwOS

Note: These are basic VLAN configuration examples. In case a more detailed property description is needed, then please refer to VLAN Manual.

VLAN Example #1 (Trunk and Access Ports)

Example 1 Setup Diagram

1) In VLAN menu configure Default VLAN ID on planned access ports to assign untagged traffic to specific VLAN in the switch.

Default VLAN ID configuration for RB260 device

https://wiki.mikrotik.com/wiki/SwOS/RB250-RB260-VLAN-Example 1/6
8/4/23, 10:46 AM SwOS/RB250-RB260-VLAN-Example - MikroTik Wiki

Default VLAN ID configuration for RB250 device

2) In VLANs menu add VLAN entries and specify port membership to certain VLANs.

VLAN Membership for RB260 device. Use always strip property for untagged ports and add if missing for tagged port. All other ports that are not members for this specific
VLAN should be marked with a not a member property

https://wiki.mikrotik.com/wiki/SwOS/RB250-RB260-VLAN-Example 2/6
8/4/23, 10:46 AM SwOS/RB250-RB260-VLAN-Example - MikroTik Wiki

VLAN Membership for RB250 device

3) At the end, enable strict VLAN filtering to ensure only allowed VLANs can pass through the ports.

VLAN Mode for RB260 device

https://wiki.mikrotik.com/wiki/SwOS/RB250-RB260-VLAN-Example 3/6
8/4/23, 10:46 AM SwOS/RB250-RB260-VLAN-Example - MikroTik Wiki

VLAN Mode and Egress VLAN Header options for RB250 device. Use always strip property for untagged ports and add if missing for
tagged port. In order to successfully apply all VLAN related settings, a device reboot might be carried out

VLAN Example #2 (Trunk and Hybrid Ports)

Note: This configuration example only applies to RB260 device. Hybrid port configuration is not possible on RB250 device.

Example 2 Setup Diagram

1) In VLAN menu configure Default VLAN ID on planned hybrid ports to assign untagged traffic to specific VLAN in the switch.

https://wiki.mikrotik.com/wiki/SwOS/RB250-RB260-VLAN-Example 4/6
8/4/23, 10:46 AM SwOS/RB250-RB260-VLAN-Example - MikroTik Wiki

Default VLAN ID for untagged traffic

2) In VLANs menu add VLAN entries and specify port membership to certain VLANs. Just like the previous example, an add if missing property is used for a trunk port and same for hybrid ports where
tagged traffic forwarding is allowed. For untagged traffic (defined by Default VLAN ID) you need to use either leave as is or always strip property (black arrows).

VLAN Membership

3) At the end, enable strict VLAN filtering to ensure only allowed VLANs can pass through the ports. For hybrid ports to work properly, make sure VLAN Receive is selected as any, otherwise ingress tagged or
untagged traffic can be dropped (depending on selected option), but for the trunk port, it is possible to allow only packets with VLAN tag.

https://wiki.mikrotik.com/wiki/SwOS/RB250-RB260-VLAN-Example 5/6
8/4/23, 10:46 AM SwOS/RB250-RB260-VLAN-Example - MikroTik Wiki

VLAN Filtering

Retrieved from "https://wiki.mikrotik.com/index.php?title=SwOS/RB250-RB260-VLAN-Example&oldid=33350"

This page was last edited on 12 June 2019, at 12:07.

https://wiki.mikrotik.com/wiki/SwOS/RB250-RB260-VLAN-Example 6/6