Community discussions

MikroTik App
 
User avatar
sirEgghead
just joined
Topic Author
Posts: 19
Joined: Mon Aug 27, 2012 10:54 pm

Segregated LANs, 1 Trunk

Mon Nov 19, 2012 3:50 am

So originally I setup my network so that ether1 is my WAN, and ether2 is my LAN. LAN is 172.16.1.0/24.

Now I have an additional WAN and an additional LAN. ether3 is WAN2 and ether4 is LAN2. LAN2 is 172.16.13.0/24.

I setup my RB450G so that LAN1 and LAN2 do not communicate. Initially after the change, ether4 was only LAN2. Now I have relocated a PC from LAN1's physical location to LAN2's physical location. I still need that relocated PC on LAN1, even though it is now on the trunk line on ether4.

All PCs on both LANs have DHCP reservations. DHCP is hosted on the RB450G. DHCP pool 1 is LAN1 on ether2. DHCP pool 2 is LAN2 on ether4.

Two questions.

1. Can I still make the relocated PC work on LAN1 from ether4? If so, how? VLANs?
2. Can I still do this without setting a static address on the PC?


Thanks,
Thomas
 
rjickity
Member Candidate
Member Candidate
Posts: 212
Joined: Sat Jul 17, 2010 10:40 am
Location: Perth, Australia

Re: Segregated LANs, 1 Trunk

Mon Nov 19, 2012 6:12 am

If you have a vlan switch yes.

-Create vlan interface on lan2 interface
-Create a bridge interface
-Add vlan and lan1 interface to bridge.
-Relocate ip and dhcp to bridge instead of lan1 physical interface.
-add vlan id to switch
-tag vlan on port connecting switch to lan2 physical interface
-assign untagged on new vlan on switch to the port your special computer is connected to.

Hope that helps

Sent from my GT-I9100 using Tapatalk 2
 
User avatar
sirEgghead
just joined
Topic Author
Posts: 19
Joined: Mon Aug 27, 2012 10:54 pm

Re: Segregated LANs, 1 Trunk

Mon Nov 19, 2012 6:16 am

Yeah I was hoping to stay away from VLANs. Doesn't ever happen that way though.

Thanks.
 
rjickity
Member Candidate
Member Candidate
Posts: 212
Joined: Sat Jul 17, 2010 10:40 am
Location: Perth, Australia

Re: Segregated LANs, 1 Trunk

Mon Nov 19, 2012 11:53 am

you could alternatively use a gre tunnel or some form of vpn if it suits you better? You can achieve the same result. The mkt is able to do quite alot of them. Pptp server is probably the easiest to do.

Sent from my GT-I9100 using Tapatalk 2
 
User avatar
sirEgghead
just joined
Topic Author
Posts: 19
Joined: Mon Aug 27, 2012 10:54 pm

Re: Segregated LANs, 1 Trunk

Mon Nov 19, 2012 9:06 pm

Well I got it setup. I'm just not a big fan of using VLANs. I was just hoping to find some way around it. No big deal though, I suppose. Here's how I did it.

Added vlan1 with ID 100 on ether4.
Added vlan2 with ID 200 on ether4.
Added vlan1 to bridge1 (ether2 was already in bridge1).
Moved address 172.16.13.1/24 from ether4 to vlan2.
Moved dhcp2 from ether4 to vlan2.

On the switch I setup
VLAN ID 100 on ether1 and ether2
VLAN ID 200 on ether1 and ether3
ether1 VLAN ingress enabled, egress add VLAN header if missing
ether2 VLAN ingress strict, egress strip VLAN header
ether3 VLAN ingress strict, egress strip VLAN header

Everything seems to be working fine. For a bit there, it all worked fine, then dhcp1 bugged out and was flagged as invalid. Network traffic wasn't working from router ether4 either. Messed around with some crap. Nothing I did got rid of the invalid flag. It finally just went away on its own. I changed the settings back, and everything is working now. Same way it was the first time when it was working as well as when it was broken. Who knows?


Thomas

Who is online

Users browsing this forum: Ahrefs [Bot], Amazon [Bot], Bing [Bot] and 149 guests