MikroTik

boxcee

Thanks everyone, for all the input!

I finally solved my last problem, which was the guest Wi-Fi not handing out IP addresses. There was a wrong number in my address. 169 instead of 168.

boxcee

Dang, I thought I had it attached to my last post... Router # 2025-02-06 12:30:36 by RouterOS 7.17.1 # software id = REDACTED # # model = RB4011iGS+ # serial number = REDACTED /interface bridge add admin-mac=REDACTED auto-mac=no comment=defconf name=bridge \ vlan-filtering=yes /interface ethernet se...

boxcee

Router config:
/ip dhcp-server
add address-pool=dhcp interface=bridge lease-time=2h name=defconf

Touché. It's not in the latest config any more, though. I still cannot access the internet on the guest WiFi. That is my current problem. Everything else is working great now.

boxcee

1. USE VLANS, do not assign dhcp to bridge etc. I didn't? 2. a. What should NOT be on your router anywhere is 192.168.88.0 - if you need it assign another vlan but you already have a home subnet, and a management subnet, so WTF is 192.168.88 ??? Removed, so we can focus on the actual problem. 1. wh...

boxcee

Have you added the guest vlan as an interface of the LAN?

I presume you mean the LAN interface list? Yes, I did.

Regarding your guide: I think my setup is similar, except that I do use the mgmt VLAN to hand out IP addresses instead. What is your reasoning to adding this additional LAN VLAN?

boxcee

You can set which interface gets DCHP requests. You should really have a separate VLAN set up for your LAN that is different from the management VLAN of your switches. Thanks, that is my setup exactly. The DHCP requests look fine. Depending on which SSID I am connected to, I get different IP addres...

boxcee

However, connecting to the guest and iot WiFi doesn't grant me access to the internet now. Could be it's because you're blocking access to DNS server on router itself from !LAN subnets (blocked by general "drop input all not from LAN"). You'll have to create allow rules for both TCP and U...

boxcee

Okay, okay, I followed your advice and went all VLAN now. Adapted the CAPsMAN config to it by following the guidance in this thread here: https://forum.mikrotik.com/viewtopic.php?p=1123309#p1123309. Most of the setup works: cAPs get their IP address from the mgmt VLAN/DHCP home WiFi devices get an I...

boxcee

Thanks a lot for the updated guide! Works well!

I have a suggestion, though. Perhaps put these lines for the cAP AX at the end:

/interface bridge port
add bridge=bridgeLocal frame-types=admit-only-vlan-tagged interface=ether1

If they are done too early, you will lock yourself out.

boxcee

From that thread:

The only deviation comes when you start using capsman but thats another topic ( datapath is used to assign vlans or something like that)

And I use CAPsMAN in my setup as well.

boxcee

I didnt have to look far into your router, its missing vlans, only guest is identified. Thanks for having another look! Can I not have both VLAN traffic an non-VLAN traffic in the same network? My first goal is to only configure the guest VLAN properly, then take it from there. I ran Torch on the A...

boxcee

Okay, coming back to this now with the new switch. I cannot make it work right now. Testing access to the guest WiFi and obtaining an IP address fails. This is the current VLAN setup for the guest VLAN on the switch. VLAN This is the current LAG setup on the switch. LAG From what I understand so far...

boxcee

I didn't have any success with configuring the router. I got a media converter instead and was able to access the SFP module.

boxcee

The first config snippet was from the guide anav posted. Not my config. My config is a few posts above. Currently, I only have the VLAN 300 (guest) configured, since I wanted to start with it. Ultimately, I want three VLANs: 100: One management, where I can access the router, the WiFi APs, the NAS e...

boxcee

I just bought a new switch now. According to the Netgear community the current switch only partially supports VLAN management.

Will check in again once it arrived.

boxcee

So far, I configured the switch only and testing with one Wi-Fi only while keeping the old non-VLAN setup on the side. The CAPs are CAPsMANed. When connecting to the `guest` Wi-Fi, I cannot obtain IP address from the DHCP. But I think the tagging of the LAG is a good pointer. Unfortunately, I couldn...

boxcee

My current config on the managed switch. Now with three VLANs (mgmt, home, guest): Bildschirmfoto 2025-01-21 um 12.11.20.png Bildschirmfoto 2025-01-21 um 12.11.26.png Bildschirmfoto 2025-01-21 um 12.11.32.png Bildschirmfoto 2025-01-21 um 12.11.36.png Bildschirmfoto 2025-01-21 um 12.11.40.png Bildsch...

boxcee

Yes, looks like this:

Bildschirmfoto 2025-01-21 um 09.12.03.png

boxcee

Thanks for the prompt reply, but unfortunately, no success. I added your rule, but nothing. No successful ping to 192.168.1.1.

boxcee

Full config export: # 2025-01-20 09:48:07 by RouterOS 7.17 # software id = REDACTED # # model = RB4011iGS+ # serial number = REDACTED /interface bridge add admin-mac=REDACTED auto-mac=no comment=defconf name=bridge /interface ethernet set [ find default-name=ether3 ] comment="b\C3\BCro" se...

boxcee

Cannot be that unhappy, you posted on JAN 08, and only getting to it now??? Must have been in the hospital or on vacation. Haha, no. In the past, when I tried to get the configuration of my VLANs right, I regularly locked myself out (and everyone else in the house). They are unhappy when I 'play' w...

boxcee

I recently bought a Luleey SFP GPON module as a replacement for the 'official' GPON module from my internet provider. This one here: https://www.luleey.com/product/2-5g-xpon-stick-sfp-onu/. The official one has connection issues sporadically, and the Luleey one is supposed to be more stable. Accordi...

boxcee

Thanks for all the help so far! I haven't had a change to try it out yet. There are members in the house very unhappy about the WiFi not being accessible. Will keep you posted, though!

boxcee

I'm using CRS328-24P-4S+ with LuLeey LL-XS2510 (rebranded DFP-34X-2C2 with custom firmware in it).

May I send you a PM regarding the LuLeey module?

boxcee

On the netgear switch all trunk ports retain vlan1 untagged on the port. PVID setting remains at 1 for these ports. On the netgear switch all access ports ( going to dumb devices ) are untagged on that port going to the device and tagged for trunk ports. PVID is changed to relevant vlan ID. You mea...

boxcee

I have the following network topology at home: topologie.drawio.png I want to follow this guide for setting up my WiFi to provide different networks on different VLANs. My question is, how do I need to configure the PoE Switch in between to pass the tagged frames to the router? Currently, no VLAN se...

boxcee

Follow up.

Works fine now with the RB4011. CPU usage is almost always below 5% and package loss is gone.

Thanks for bearing with me.

boxcee

For the record, my config. # 2024-10-17 08:53:04 by RouterOS 7.16.1 # software id = REDACTED # # model = CRS125-24G-1S # serial number = 6244054AD9DA /interface bridge add admin-mac=REDACTED auto-mac=no comment=defconf name=bridge \ vlan-filtering=yes /interface ethernet set [ find default-name=sfp1...

boxcee

I ordered a RB4011iGS+RM now. Will update once its here.

boxcee

You would see that when used as router (it is a switch) you would be able to get around 245Mbps at max.

Wouldn't 245Mbps be enough for home use. And how would this be related to the lag spikes?

What devices should I be looking at?

boxcee

Can you check CPU usage? (think it is on /system health) This is /system resource print : uptime: 20h12m58s version: 7.16.1 (stable) build-time: 2024-10-10 14:03:32 free-memory: 74.0MiB total-memory: 128.0MiB cpu: MIPS 74Kc V4.12 cpu-count: 1 cpu-frequency: 600MHz cpu-load: 16% free-hdd-space: 111....

boxcee

From router to 8.8.8.8: sent=232 received=219 packet-loss=5% min-rtt=6ms690us avg-rtt=10ms141us max-rtt=38ms349us From my machine to 8.8.8.8 (through router): 435 packets transmitted, 422 packets received, 3.0% packet loss round-trip min/avg/max/stddev = 6.493/919.693/2961.925/997.422 ms From my mac...

boxcee

Hey everyone, Some time ago, I bought the CRS125-24G-1S-RM as a second-hand device. I am happy with it so far. It is running with an SFP fibre module from the Deutsche Telekom and I have no issues with internet in general. However, when I have video calls, I get lag spikes. To test where they come f...

Search found 33 matches

Re: How to set up VLAN to pass traffic through a managed switch? [SOLVED]

Re: How to set up VLAN to pass traffic through a managed switch? [SOLVED]

Re: How to set up VLAN to pass traffic through a managed switch? [SOLVED]

Re: How to set up VLAN to pass traffic through a managed switch? [SOLVED]

Re: How to set up VLAN to pass traffic through a managed switch? [SOLVED]

Re: How to set up VLAN to pass traffic through a managed switch? [SOLVED]

Re: How to set up VLAN to pass traffic through a managed switch? [SOLVED]

Re: How to set up VLAN to pass traffic through a managed switch? [SOLVED]

Re: Guide: CAPsMAN configuration with management VLAN (RouterOS 7.14.3)

Re: How to set up VLAN to pass traffic through a managed switch? [SOLVED]

Re: How to set up VLAN to pass traffic through a managed switch? [SOLVED]

Re: How to set up VLAN to pass traffic through a managed switch? [SOLVED]

Re: Trying to access a Luleey SFP module

Re: How to set up VLAN to pass traffic through a managed switch? [SOLVED]

Re: How to set up VLAN to pass traffic through a managed switch? [SOLVED]

Re: How to set up VLAN to pass traffic through a managed switch? [SOLVED]

Re: How to set up VLAN to pass traffic through a managed switch? [SOLVED]

Re: Trying to access a Luleey SFP module

Re: Trying to access a Luleey SFP module

Re: Trying to access a Luleey SFP module

Re: How to set up VLAN to pass traffic through a managed switch? [SOLVED]

Trying to access a Luleey SFP module

Re: How to set up VLAN to pass traffic through a managed switch? [SOLVED]

Re: Mikrotik switch SFP+ port issue on COLD restart

Re: How to set up VLAN to pass traffic through a managed switch? [SOLVED]

How to set up VLAN to pass traffic through a managed switch? [SOLVED]

Re: Ping spikes with CRS125-24G-1S-RM on LAN, not sure where to start debugging [SOLVED]

Re: Ping spikes with CRS125-24G-1S-RM on LAN, not sure where to start debugging [SOLVED]

Re: Ping spikes with CRS125-24G-1S-RM on LAN, not sure where to start debugging [SOLVED]

Re: Ping spikes with CRS125-24G-1S-RM on LAN, not sure where to start debugging [SOLVED]

Re: Ping spikes with CRS125-24G-1S-RM on LAN, not sure where to start debugging [SOLVED]

Re: Ping spikes with CRS125-24G-1S-RM on LAN, not sure where to start debugging [SOLVED]

Ping spikes with CRS125-24G-1S-RM on LAN, not sure where to start debugging [SOLVED]