So unlike some of the other boards the RB3011 doesn't have a "switch all ports" setting. Thus all ports ether1 through ether5 are in the switch. I want to utilize port ether1 as my gateway port and then use ether2 through ether5 as tagged vlan trunks. I'm trying to figure out the proper way to set this up in the switch chip. This is what I have so far... it seems to work, but I was curious if I was missing anything else.... thoughts?
My basic idea is to set ether3 to ether5 with master-port ether2. So I should have to basic groups coming from the switch chip.... ether1 and ether2.
Then I set the vlan modes to secure and put the default vlan for all ports to 0 (except ether5 which is an access port for vlan 1, so its default vlan id is 1). I set ether1 and ether5 to strip-always since they are access ports. Ether1 is an access port on vlan0 (e.g. untagged from my isp) and ether5 is an access port on vlan1.
Then I setup the vlans.... For my internal vlans (1,100,1003) i added ether2-ether5 and switch cpu. Then I added ether1 and switch cpu to vlan0.
Added my vlans to ether2 and it was working....
Correct me if I'm wrong, but with this setup
ether1 will get untagged traffic, which will go into routeros under ether1
ether2 through ether4 will get tagged traffic only (since default vlan is 0 and they are not members) for vlans (1,100,1003)
ether5 will get untagged traffic only for vlan1
Thoughts?
Code: Select all
/interface ethernet
set [ find default-name=ether1 ] name=ether01-gateway
set [ find default-name=ether2 ] name=ether02
set [ find default-name=ether3 ] master-port=ether02 name=ether03
set [ find default-name=ether4 ] master-port=ether02 name=ether04
set [ find default-name=ether5 ] master-port=ether02 name=ether05
/interface ethernet switch port
set 0 default-vlan-id=0 vlan-header=always-strip vlan-mode=secure
set 1 default-vlan-id=0 vlan-header=add-if-missing vlan-mode=secure
set 2 default-vlan-id=0 vlan-header=add-if-missing vlan-mode=secure
set 3 default-vlan-id=0 vlan-header=add-if-missing vlan-mode=secure
set 4 default-vlan-id=0 vlan-header=add-if-missing vlan-mode=secure
set 5 default-vlan-id=1 vlan-header=always-strip vlan-mode=secure
/interface ethernet switch vlan
add independent-learning=yes ports=switch1-cpu,ether02,ether03,ether04 \
switch=switch1 vlan-id=100
add independent-learning=yes ports=switch1-cpu,ether02,ether03,ether04 \
switch=switch1 vlan-id=1003
add independent-learning=yes ports=\
switch1-cpu,ether02,ether03,ether04,ether05 switch=switch1 vlan-id=1
add independent-learning=yes ports=switch1-cpu,ether01-gateway switch=switch1
interface vlan
add comment="Management VLAN" interface=bridge-main name=vlan-management \
vlan-id=1
add comment="Private VLAN" interface=bridge-main name=vlan-private vlan-id=\
100
add comment="Public VLAN" interface=bridge-main name=vlan-public vlan-id=1003-Eric