General • Re: Bridge VLAN Filtering Problem

VLAN 124 is tagged on ether1 and ether2, and untagged on ether5. OpenWrt LAN is connected to ether1 on VLAN 124 (tagged). Not-VLAN-aware devices connected to ether5, or VLAN-aware devices consuming VLAN 124 connected to ether2 all fail to get DHCP lease, but have full IPv6 internet connectivity via the OpenWrt router on ether1.

This obviously should work.
You have DHCP snooping disabled, still the bridge (resp. the RB5009 switch ASIC) seems to drop ingress DHCP offers on ether1. This is what DHCP-snooping would do on an untrusted port. For the sake of an experiment:
Does it make a difference if you set
a) trusted=yes on ether1
b) trusted=yes on ether1 and DHCP-snooping on bridge enabled

If one of the above helps, there is a bug with DHCP filtering for tagged ports on bridge VLANs without CPU facing interface.

Statistics: Posted by jbl42 — Thu Mar 13, 2025 12:02 am

---