I should look something like that.

The safest thing is to configure the bridge and vlans from OFF the bridge..... Check this link out for a safer approach...... https://forum.mikrotik.com/viewtopic.php?t=181718 Hi Anav, I decided to prepare a configuration from scratch. I followed your instructions from the link you provided earlier...

IPSec policies are reliable, you can trust them. To test it without the device, you could either use another (if there's any), or you could temporarily assign 192.168.77.100 to router and do e.g.: /tool/traceroute src-address=192.168.77.100 address=8.8.8.8 It would be good enough to test config on ...

NOpe. Define vlans, give them ip pool, address, dhcp-server, dhcp server-network When you define the vlans you will need to put in an interface choice which is the bridge. Add ports to bridge ports /interface bridge ports add tagged or untagged vlans to ports /interface bridge vlans etc... https://...

ONE BRIDGE< Identify all required subnets Create vlans all belonging to bridge each vlan gets IP pool, address, dhcp-server, dhcp-server network identify access and trunk ports via /interface bridge ports identify all tagged and untagged ports via /interface bridge vlans turn on bridge vlan filteri...

Sorry for a late response. Actually, at the beggining I didnt use VLANs, but only default network 192.168.88.0/24 Than I expand my infrastructure and implement a VMware lab for which I needed VLANs. I configured them only on one mikrotik port (eth4). What I did is just defining VLANs under Interface...

Hey, Thank you for a help. I did as you suggested. Source is only 192.168.77.100/32 , Destination 0.0.0.0/0 and on the main site Source 0.0.0.0/0 and Destination 192.168.77.100/32. Unfortunatelly I cannot test if this setting is now properly routing all traffic from 192.168.77.100 via 192.168.88.1 G...

If you have plain IPSec, then what goes in tunnel is controlled by policies and it's not very flexible. Let's say you want to tunnel traffic to internet from 192.168.77.100, for that you'd need policy for 192.168.77.100/32 <-> 0.0.0.0/0 (use level=unique for all), but it's just like that, static wi...

Hi, I recently established a S2S IPsec VPN tunnel between 2 Mikrotik routers. On main site Mikrotik is a primary router with a Public inet, and on other site Mikrotik is behind a TP-Link Archer (SIM card inet). I will add basic sheme of a network bellow. I would like to know 2 things, because I am s...

Hi, I am curently using RouterBOARD 750G r2 as main router in my house. Port 1 is WAN Port 2 default (bridge) 192.168.88.0/24 Port 3 default (bridge) 192.168.88.0/24 Port 4 Trunk port for VLANs 100,200 and 50 Port 5 default (bridge) 192.168.88.0/24 Port is going to a managed switch and next to VMwar...

Oh boy... what is that crazy exercise with input and output chains? Use normal stateful firewall (rules with connection-state), see e.g. here . And I don't think you need most of those rules at all. As for communication between vlan subnets, current firewall is not blocking that (it's chain=forward...

Post your latest config

Here it is:

Hi, I managed to solve the vlan issue. Now I finally am able to get all necessary vlans from tplink switch. It is enough to just create a VLANs under Interface menu, and add IP addresses to those VLANs. I found out that I had a problem with vlan1 (U/T). However, I would just like to ask how can I &q...

Vlan 1 on tplink switch is default untagged for all ports. In theory i would have to change it to tagged, or just put everything blank. Every non trunk port can have only one untagged vlan (access port), so i can asume this default value has to be changed for vlan1 - from untagged to nothing or tagg...

If you need to use only one port on RB, and you're sure that you won't need more in future (e.g. you won't need to extend same VLANs to another switch in second RB's port), then just remove that port from any existing bridge, add four VLAN interfaces to it, and that's it (aside from IP settings and...

Hi, I have been using Mikrotik RB750GR2 for couple of month as my main router and till now I have been able to configure everthing I really needed. Now I am extending my home lab and would like activate several VLANs which are more or less intended for VMware lab. Network topology is very basic. The...