Bridge VLAN filtering

[devast]

@psherman

While there may be an academic reason to consider option 1

Exactly. Technically #1 is the correct. Openwrt just does this so it hides it from you:

@jow

Pvid is only need in special async vlan setups (where ingress tagging != egress tagging). You usually do not need to specify it explicitly. It either implicitly defaults to the first untagged VLAN configured on the port or it is not defined at all if unspecified.

Some other networking devices do not do any obfuscation. Some do it with different constraints, like ER-X.

Edit: Weird setup example: https://forum.openwrt.org/t/dsa-and-pvid-usage-examples/106420