Please help me in setting up the Mikrotik Atheros 8227 hardware switch?

Question

Mikrotik

Hello
The essence of the question is as follows There is 1 ether3 port on it 2VLAN (123 and 321) each of which has its own subnet (let's say 192.168.123.0\24 and 192.168.234.0\24) When transferring data from one network to another, the load on Mikrotik processor. I learned about the possibility of configuring VLAN based on the Mikrotik Atheros 8227 hardware switch, bypassing the main CPU
At the moment I created a test environment and played around with the settings - the result is 0
/interface vlan
add interface=ether3 name=vlan123 vlan-id=123
add interface=ether3 name= vlan321 vlan-id=321
/interface ethernet switch port
set 2 default-vlan-id=1 vlan-header=add-if-missing vlan-mode=secure
/interface ethernet switch vlan
add ports=ether3,switch1-cpu switch=switch1 vlan-id=123
add ports=ether3,switch1-cpu switch=switch1 vlan-id=321
add ports=ether3,switch1-cpu switch=switch1 vlan-id=1

Answer 1

The meaning of working with vlans through a switch-chip is "to analyze the contents of the vlan of the incoming frame without a percentage ". Those. a frame arrived at the first port with 10 vlans. According to the switching table, it must be sent to the 3rd and 5th ports. This analysis takes place on the switch chip, which gives the wire-speed for switching . Different switch chips have different hardware capabilities for analyzing and modifying frames. To find out the possibilities, you need to look at the documentation, for example at https://wiki.mikrotik.com/wiki/Manual:Switch_Chip_... . It is advisable to look at the original, and not at the translation, which may be clumsy or incomplete, because the original article can be corrected/added, but the translation cannot.
To send a frame from one vlan (L2 level) to another based on the ip address (and this is already L3), this microtic chip needs to use a percent. As Mystray correctly said , for this you need to add cpu to such a vlan (i.e. if the percent does not have access to some kind of vlan, then mikrotik cannot do anything * with packets from such a vlan - routing, firewall).
By the way, the use of a switch chip gives a good offload to the router processor. Most of the advice on the Internet on mikrotik vlans is based on a more universal, "understandable" bridge system, which gives a significantly higher load on the percentage.
Try a switch chip, at least look at the difference in speed, load. Knowledge does not pull a pocket, and performance improvement based on knowledge of hardware platforms is an indicator of a networker (at least cisco, at least hp, at least something)

Answer 2

Judging by the table , the 8227 chip belongs to the "other" column and does not know how to VLAN.

Answer 3

Clearly ATP In the office where you need to configure the Atheros 8316 chip
I will redo the test environment, I will find a new Mikrotik

Answer 4

In any case, routing between different IP subnets will go through the CPU, no switch chip will help here (except for full-fledged L3 switches with IP interfaces on vlans, but Mikrotik is not one of them).