Mikrotik address on VLAN vs address on interface?

Question

Mikrotik

Good afternoon.
First option:
1. There is a tagged port with Esxi VLAN 16 that comes to the eth1 mikrotik interface with the tag (trunk)
2. There is an address from this vlan 10.0.16.1
3. I put this address on the eth1 mikrotik interface
My computer is connected to a network with VLAN16 ( access port ) and I ping from computer 10.0.16.1 - everything is ok.
Second option.
On the micro, I make VLAN16, assign it the eth1 port, and put the address 10.0.16.1 not on the interface, but on VLAN16.
I ping from computer 10.0.16.1 - pings do not go through.
The question is why? Do I need a bridge and how will it help?

Answer 1

Mikrotik has a very specific VLAN setup compared to other equipment.
There are 2 ways to configure - the first one is through bridges for each VLAN and subinterfaces for intercepting tagged traffic. (It looks like this is exactly what you tried to do) And the second one is through VLAN filtering. Traditionally, the first way is purely software, it does not use the switch chip, even if it exists. At the moment they recommend configuring via VLAN Filtering. If it is possible to use the switching chip, Mikrotik will activate it itself (Switch menu), if not, software processing will be used. Read about it here https://wiki.mikrotik.com/wiki/Manual:Interface/Br...I strongly recommend using this particular VLAN configuration method. But here the choice is yours. More on your question. Access Port on Mikrotik? Or on other equipment connected to Mikrotik? In general, if you follow the first path, then 1) you need to create a new bridge 2) add a VLAN port (subinterface) with VLAN id 16 to the trunk 3) Add the interface created in p2 to the bridge created in p2 VLAN. Attention ! By default, RSTP is enabled in the bridge settings. Adding a VLAN interface to the bridge can lead to a topology rebuild, and if something like bpdu guard is configured on the other hand, this can generally lead to an automatic shutdown of the port on the switch in which Mikrotik is enabled. Be careful ! well, 4) Add the ip you need to the bridge created in p1. For all questions, you can contacttelegram

Answer 2

https://linkmeup.ru/blog/13.html

Answer 3

Thank you. After reading, I realized that by default Mikrotik is a router, not a switch.
Accordingly, the ports operate in routing mode (L3).
For L2 to work, you need to set up a switch chip, or through a bridge.