adding ethernet port to a vlan on router with trunk bridge

RouterOS General
1

Hi,

I am using mikrotik routers to route our inter-VLANs traffic. All ethernet ports are VLAN trunks, for redundancy I am bonding couple of ethernet ports into one bond interface and then bridging the bonded interfaces using one final bridge to which all the VLANs are attached to (see bellow). This works all great. It means all the ethernet ports carry VLAN tagged traffic as trunk ports. I would now like to have few more ethernet ports that are ‘access’ ports to specific VLANs but I am unable to configurate this.

My current config is following:

Bonding physical interfaces

/interface bonding
add arp=enabled arp-interval=100ms arp-ip-targets="" disabled=no down-delay=0ms lacp-rate=30secs link-monitoring=mii-type1 mii-interval=100ms mode=802.3ad mtu=1500 name=bond1 primary=none slaves=\
    ether1,ether2 transmit-hash-policy=layer-2-and-3 up-delay=0ms
add arp=enabled arp-interval=100ms arp-ip-targets="" disabled=no down-delay=0ms lacp-rate=30secs link-monitoring=mii-type1 mii-interval=100ms mode=802.3ad mtu=1500 name=bond2 primary=none slaves=\
    ether6,ether7 transmit-hash-policy=layer-2-and-3 up-delay=0ms

Bridging bonded interfaces

/interface bridge
add admin-mac=00:00:00:00:00:00 ageing-time=5m arp=enabled auto-mac=yes disabled=no forward-delay=15s l2mtu=65535 max-message-age=20s mtu=1500 name=bridge1 priority=0x8000 protocol-mode=rstp \
    transmit-hold-count=6
/interface bridge port
add bridge=bridge1 disabled=no edge=auto external-fdb=auto horizon=none interface=bond1 path-cost=10 point-to-point=auto priority=0x80
add bridge=bridge1 disabled=no edge=auto external-fdb=auto horizon=none interface=bond2 path-cost=10 point-to-point=auto priority=0x80

Attaching vlans to the bridge

/interface vlan
add arp=enabled comment=Management disabled=no interface=bridge1 l2mtu=65531 mtu=1500 name=vlan128 use-service-tag=no vlan-id=128
add arp=enabled comment=Production disabled=no interface=bridge1 l2mtu=65531 mtu=1500 name=vlan129 use-service-tag=no vlan-id=129
add arp=enabled comment=Internet disabled=no interface=bridge1 l2mtu=65531 mtu=1500 name=vlan10 use-service-tag=no vlan-id=10
add arp=enabled comment=Development disabled=no interface=bridge1 l2mtu=65531 mtu=1500 name=vlan130 use-service-tag=no vlan-id=130

Now to have the extra ethernet port as a VLAN ‘access’ port I would expect something like this (which doesn’t work):

/interface vlan remove [find name=vlan130]
/interface bridge add name=bridge130
/interface bridge port
add bridge=bridge130 interface=ether13
add bridge=bridge130 interface=bridge1
/interface vlan add interface=bridge130 name=vlan130 vlan-id=130

This freezes the whole router so apparently not the right approach.

How can I make the interface ether13 to be an access port in vlan130 while keeping the existing functionality (the router provides the inter-vlan routing for all trunk traffic)?

Thanks, Antony.

2

I think I am confused about what exactly you want?.. can you post a diagram of your setup? … also post your export from the interfaces section…

-Eric

3

I think I am confused about what exactly you want?.. can you post a diagram of your setup? … also post your export from the interfaces section…

-Eric

The point is actually very simple - I have router that can route vlan traffic coming from trunk ports (ie. ports are passing tagged traffic). I want to have one (or more) port(s) that are passing untagged traffic of particular vlan (ie. vlan130 in my case). So I can patch myself to that port with my laptop and get connected directly to vlan130 (while rest of the trunk ports are still passing tagged traffic including vlan130).

I am attaching dump of my interfaces.

The diagram would be:

+-----------------------------------------+
|                                - ether1 |---- ~~ tagged trunk of vlans 128,129,130,200,10
|                               /         |
|                        - bond0          |
| vlan128 --- \         /       \         |
| vlan129 ---- \       /         - ether2 |---- ~~ tagged trunk of vlans 128,129,130,200,10
| vlan130 ----- bridge1                   |
| vlan200 ---- /       \         - ether3 |---- ~~ tagged trunk of vlans 128,129,130,200,10
| vlan10  --- /         \       /         |
|                        - bond1          |
|                               \         |
|                                - ether4 |---- ~~ tagged trunk of vlans 128,129,130,200,10
|                                         |
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|                                         |
|                         ????  - ether13 |---- ~~ UNTAGGED vlan 130 ????
|                                         |
+-----------------------------------------+

ifaces.txt (5.24 KB)

4

Pasting your code into a syntax tag… so I can read it… solution to follow…
/interface bridge
add admin-mac=00:00:00:00:00:00 ageing-time=5m arp=enabled auto-mac=yes disabled=no forward-delay=15s l2mtu=65535 max-message-age=20s mtu=1500 name=bridge1 priority=0x8000 protocol-mode=rstp
transmit-hold-count=6
/interface ethernet
set 0 arp=enabled auto-negotiation=yes disabled=no full-duplex=yes l2mtu=1600 mac-address=D4:CA:6D:42:40:A2 mtu=1500 name=ether12 speed=100Mbps
set 1 arp=enabled auto-negotiation=yes disabled=yes full-duplex=yes l2mtu=1600 mac-address=D4:CA:6D:42:40:A3 mtu=1500 name=ether13 speed=100Mbps
set 2 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited disabled=no full-duplex=yes l2mtu=1598 mac-address=D4:CA:6D:42:40:97 master-port=none mtu=1500 name=ether1 speed=100Mbps
set 3 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited disabled=no full-duplex=yes l2mtu=1598 mac-address=D4:CA:6D:42:40:98 master-port=none mtu=1500 name=ether2 speed=100Mbps
set 4 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited disabled=yes full-duplex=yes l2mtu=1598 mac-address=D4:CA:6D:42:40:99 master-port=none mtu=1500 name=ether3 speed=100Mbps
set 5 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited disabled=yes full-duplex=yes l2mtu=1598 mac-address=D4:CA:6D:42:40:9A master-port=none mtu=1500 name=ether4 speed=100Mbps
set 6 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited disabled=yes full-duplex=yes l2mtu=1598 mac-address=D4:CA:6D:42:40:9B master-port=none mtu=1500 name=ether5 speed=100Mbps
set 7 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited disabled=no full-duplex=yes l2mtu=1598 mac-address=D4:CA:6D:42:40:9C master-port=none mtu=1500 name=ether6 speed=100Mbps
set 8 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited disabled=no full-duplex=yes l2mtu=1598 mac-address=D4:CA:6D:42:40:9D master-port=none mtu=1500 name=ether7 speed=100Mbps
set 9 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited disabled=yes full-duplex=yes l2mtu=1598 mac-address=D4:CA:6D:42:40:9E master-port=none mtu=1500 name=ether8 speed=100Mbps
set 10 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited disabled=yes full-duplex=yes l2mtu=1598 mac-address=D4:CA:6D:42:40:9F master-port=none mtu=1500 name=ether9 speed=100Mbps
set 11 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited disabled=yes full-duplex=yes l2mtu=1598 mac-address=D4:CA:6D:42:40:A0 master-port=none mtu=1500 name=ether10 speed=100Mbps
set 12 arp=enabled auto-negotiation=yes disabled=no full-duplex=yes l2mtu=1600 mac-address=D4:CA:6D:42:40:A1 mtu=1500 name=ether11 speed=100Mbps
/interface vlan
add arp=enabled comment=Management disabled=no interface=bridge1 l2mtu=65531 mtu=1500 name=vlan128 use-service-tag=no vlan-id=128
add arp=enabled comment=Production disabled=no interface=bridge1 l2mtu=65531 mtu=1500 name=vlan129 use-service-tag=no vlan-id=129
add arp=enabled comment=Development disabled=no interface=bridge1 l2mtu=65531 mtu=1500 name=vlan130 use-service-tag=no vlan-id=130
add arp=enabled comment=CMS disabled=no interface=bridge1 l2mtu=65531 mtu=1500 name=vlan200 use-service-tag=no vlan-id=200
add arp=enabled comment=Internet disabled=no interface=bridge1 l2mtu=65531 mtu=1500 name=vlan10 use-service-tag=no vlan-id=10
/interface bonding
add arp=enabled arp-interval=100ms arp-ip-targets=“” disabled=no down-delay=0ms lacp-rate=30secs link-monitoring=mii-type1 mii-interval=100ms mode=802.3ad mtu=1500 name=bond1 primary=none slaves=
ether1,ether2 transmit-hash-policy=layer-2-and-3 up-delay=0ms
add arp=enabled arp-interval=100ms arp-ip-targets=“” disabled=no down-delay=0ms lacp-rate=30secs link-monitoring=mii-type1 mii-interval=100ms mode=802.3ad mtu=1500 name=bond2 primary=none slaves=
ether6,ether7 transmit-hash-policy=layer-2-and-3 up-delay=0ms
add arp=enabled arp-interval=100ms arp-ip-targets=“” disabled=no down-delay=0ms lacp-rate=30secs link-monitoring=mii-type1 mii-interval=100ms mode=802.3ad mtu=1500 name=bond3 primary=none slaves=
ether11,ether12 transmit-hash-policy=layer-2-and-3 up-delay=0ms
/interface ethernet switch
set 0 mirror-source=none mirror-target=none name=switch2
set 1 mirror-source=none mirror-target=none name=switch1
/interface bridge port
add bridge=bridge1 disabled=no edge=auto external-fdb=auto horizon=none interface=bond1 path-cost=10 point-to-point=auto priority=0x80
add bridge=bridge1 disabled=no edge=auto external-fdb=auto horizon=none interface=bond2 path-cost=10 point-to-point=auto priority=0x80
add bridge=bridge1 disabled=no edge=auto external-fdb=auto horizon=none interface=bond3 path-cost=10 point-to-point=auto priority=0x80
/interface bridge settings
set use-ip-firewall=no use-ip-firewall-for-pppoe=no use-ip-firewall-for-vlan=no
/interface ethernet switch port
set 0 vlan-header=leave-as-is vlan-mode=disabled
set 1 vlan-header=leave-as-is vlan-mode=disabled
set 2 vlan-header=leave-as-is vlan-mode=disabled
set 3 vlan-header=leave-as-is vlan-mode=disabled
set 4 vlan-header=leave-as-is vlan-mode=disabled
set 5 vlan-header=leave-as-is vlan-mode=disabled
set 6 vlan-header=leave-as-is vlan-mode=disabled
set 7 vlan-header=leave-as-is vlan-mode=disabled
set 8 vlan-header=leave-as-is vlan-mode=disabled
set 9 vlan-header=leave-as-is vlan-mode=disabled
set 10 vlan-header=leave-as-is vlan-mode=disabled
set 11 vlan-header=leave-as-is vlan-mode=disabled

5

Ok…
/interface bridge
add name=access-port-bridge

/interface bridge port
add interface=ether13 bridge=access-port-bridge
add interface=vlan130 bridge=access-port-bridge

6

thanks for hint, I’ve been already trying this approach but this still freezes my router
[admin@rt] /interface bridge add name=bridge130 protocol-mode=rstp
[admin@rt] /interface bridge port
[admin@rt] /interface bridge port add bridge=bridge130 interface=vlan130
… Dead after few seconds, then losing the SSH session
Connection to rt closed.
antony@antony-laptop:~$ 62;9;c62;9;c62;9;c62;9;c62;9;c62;9;c62;9;c62;9;c62;9;c62;9;c62;9;c62;9;c62;9;cSo I just create bridge130 and add single interface vlan130 to it and the route is gone (thanks for safe mode that this recovers after a while).

Any idea what’s wrong?
Thanks Antony.