Explain what's going on here?

Question

System administration

Link: https://wiki.mikrotik.com/wiki/Manual:Switch_Chip_...
Questions:
1) How does the traffic go?
2) Why is ether2 not set to vlan-header and vlan-mode?
3) Why is vlan-header=leave-as-is for switch-cpu?

Answer 1

1. Port2 (VLAN via switch chip) -> core -> vlan
2. How is this not set?
You yourself in 3. write "vlan-header = leave-as-is", in the manual vlan-mode = secure
3. Because you need to filter this packet at the switch group level and transfer it to routeros for processing, if you uncheck it immediately on switch group, then for routerOS this packet will already be VLAN1.
Read here https://habrahabr.ru/post/313248/