Unable to get trunk to Cisco switch to function

I am trying to get a trunk functional between my Asus RT-AX54 running 24.10 and a Cisco 2960 to no avail. The Cisco side dot1q encapsulation, native vlan 1, allowed VLANs 1,100-102. Pretty standard stuff. I just can't seem to see what I am doing wrong on the Asus side. I have a simple bridge, the four vlans defined, and vlan filtering turned on. I am managing via Luci and SSH via the WAN port as to not interfere with what I am trying to accomplish. Hoping someone notices something. Thanks in advance.

config interface 'loopback'
	option device 'lo'
	option proto 'static'
	option ipaddr '127.0.0.1'
	option netmask '255.0.0.0'

config globals 'globals'
	option packet_steering '1'

config device
	option name 'br-lan'
	option type 'bridge'
	list ports 'lan1'
	list ports 'lan2'
	list ports 'lan3'
	list ports 'lan4'

config interface 'lan'
	option device 'br-lan'
	option proto 'static'
	option ipaddr '192.168.100.3'
	option netmask '255.255.255.0'
	option ip6assign '60'
	option gateway '192.168.100.1'

config interface 'wan'
	option device 'wan'
	option proto 'static'
	option ipaddr '192.168.1.3'
	option netmask '255.255.255.0'

config device
	option type '8021q'
	option ifname 'br-lan'
	option vid '1'
	option name 'br-lan.1'

config device
	option type '8021q'
	option ifname 'br-lan'
	option vid '100'
	option name 'br-lan.100'

config device
	option type '8021q'
	option ifname 'br-lan'
	option vid '101'
	option name 'br-lan.101'

config device
        option type '8021q'
        option ifname 'br-lan'
        option vid '102'
        option name 'br-lan.102'

config bridge-vlan
	option device 'br-lan'
	option vlan '1'
	list ports 'lan1:u*'
	list ports 'lan2:u*'
	list ports 'lan3:u*'
	list ports 'lan4:u*'

config bridge-vlan
	option device 'br-lan'
	option vlan '100'
	list ports 'lan1:t'

config bridge-vlan
	option device 'br-lan'
	option vlan '101'
	list ports 'lan1:t'

config bridge-vlan
	option device 'br-lan'
	option vlan '102'
	list ports 'lan1:t'

bridge-vlans are always tagged to the CPU, so you need to change the lan interface's Device to br-lan.1

The 8021q sections are used by Luci for housekeeping to populate lists; they don't affect hardware at all and can be left out of a CLI configuration.

Some chips and drivers do not work with tagged and untagged on the same port. For best compatibility set up your network so that every VLAN present on a trunk cable is tagged.

1 Like