If vlan-filtering on bridge is disabled, then all the vlan-related stuff is ignored by bridge. Which means that PVID won't get applied to untagged frames on ingress, VLAN headr won't be stripped on egress and no vlan-filtering is done (so effectively as frame-types=admit-all and allowed VLANs are 1-4094).
If you enable vlan-filtering on bridge, then PVID setting actually does have effect, also different frame-types settings. I strongly suggest you to go all-vlan, meaning no PVID on MLAG-peer interface (frame-types=admit-only-vlan-tagged) and for security reasons only VLAN IDs which are actually needed. And obviously configuration has to be identical on both sides of the link.
If you enable vlan-filtering on bridge, then PVID setting actually does have effect, also different frame-types settings. I strongly suggest you to go all-vlan, meaning no PVID on MLAG-peer interface (frame-types=admit-only-vlan-tagged) and for security reasons only VLAN IDs which are actually needed. And obviously configuration has to be identical on both sides of the link.
Statistics: Posted by mkx — Wed Jan 29, 2025 10:42 am