mirror of
https://github.com/openwrt/openwrt.git
synced 2026-10-18 20:15:50 +04:00
The ingress VLAN rule of a filtering bridge VLAN keyed the CPU port as well, so every frame the host sent with that VID was classified into the VLAN's VSI, also when it was addressed to a port outside the bridge. A standalone port, or the conduit of a QCA8337 behind the PPE, then dropped it. On the RT-AX89X a VLAN-aware bridge of lan3 and 10g-copper with PVID 10 passed no traffic towards lan3. The host sends each frame already formatted for the port it names, so leave the CPU port out of the rule and keep it in the VSI's members. Assisted-by: Claude:claude-opus-5-5 Signed-off-by: Julius Bairaktaris <julius@bairaktaris.de> Link: https://github.com/openwrt/openwrt/pull/25700 Signed-off-by: Robert Marko <robimarko@gmail.com>