VLAN Transparent Bridge [USG Flex H]

Options
New
New Posts: 3
First Comment Fourth Anniversary
image  Freshman Member
in USG FLEX H Series

I have mikrotik router connect directly to switch with vlan trunk and I buy USG Flex 200H to install as transparent bridge between mikrotik and switch to filter URL/app. First, I try to test by bridging p1,p2 (no vlan) and USG can filter traffic normally, But when I try to bridge vlans in p1,p2 , USG can not filter traffic , user can surf internet without any filtering, and no any traffic log record in USG. How can I solve this ? thank you.

All Replies

  • PeterUK
    PeterUK Posts: 4,765
    250 Answers 2500 Comments Friend Collector Ninth Anniversary
    image  Guru Member
    edited October 13
    Options

    So I have not tested for this I use bridge under Ethernet but need more info as to your setup

    so the bridge can't be set what VLAN but interfaces you add can however you can't do like VLAN555 WAN and VLAN555 DMZ and bridge them so you have to offset one VLAN555 WAN and VLAN556 DMZ and bridge like so

    Screenshot 2026-10-13 155831.png

    So your tagged traffic goes
    router VLAN555 > VLAN555 (USG bridge) VLAN556 > VLAN556 switch > client

    so your saying you can't firewall this traffic?

    Thinking about it you may need to bridge per two pairs of VLAN per bridge

    Screenshot 2026-10-13 163150.png
  • New
    New Posts: 3
    First Comment Fourth Anniversary
    image  Freshman Member
    edited October 14
    Options

    Thank you. I have tried to change VLANs on Mikrotik to others vlan (existing vlan number +1000) and bridge to existing vlan on switch via USG FLex H on port 2.5G p1 and p2 , and it work. Users can not surf to some websites which I set to block on USG and I can also see traffic log in USG not passthrough L2 which no record , Thanks a lot for your advice..

    image.png

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）