![mikrotik vlan mikrotik vlan](https://i.ytimg.com/vi/-N1KzgvyK78/maxresdefault.jpg)
If the packet contains a VLAN ID that does not exist in the bridge VLAN table for the egress port, then the packet is dropped before it gets sent out. VLAN-ids - Under /interface bridge vlan menu, you can specify an entry in which certain VLANs are allowed on specific ports.By specifying an untagged port the bridge will always remove the VLAN tag from egress packets. By specifying a tagged port the bridge will always set a VLAN tag for packets that are being sent out through this port (egress). In general, tagged ports should be your trunk ports and untagged ports should be your access ports. Tagged/Untagged - Under /interface bridge vlan menu, you can specify an entry that contains tagged and untagged ports.Backgroundīefore explaining bridge VLAN filtering in-depth, you should understand a few basic concepts that are involved in bridge VLAN filtering. The most important part of the bridge VLAN filtering feature is the bridge VLAN table, which specifies which VLANs are allowed on each port, but configuring it might get quite complex if you are trying to make a more advanced setup, for generic setups you should be able to configure your device using the Trunk and Access ports example, but the purpose of this guide is to provide in-depth explanation and point out some of the behavior characteristics when using bridge VLAN Filtering. This feature should be used instead of many known VLAN misconfigurations that are most likely causing you either performance issues or connectivity issues, you can read about one of the most popular misconfigurations in the VLAN in a bridge with a physical interface section.
![mikrotik vlan mikrotik vlan](https://www.virtualizationhowto.com/wp-content/uploads/2015/12/mikrotik_vlan02.png)
To achieve this, you should use the Bridge VLAN Filtering feature. Since RouterOS v6.41 it is possible to use a bridge to filter out VLANs in your network.