Hello all,
Warning: ROS Noob here. Please be patient. Help me to learn and understand.
I'm having some trouble setting up VLAN on the Rb750Gr3. I read that one must use software-bases VLAN, since the switch chip does not support. But I am not 100% how this is done. Please enlighten me. I already read through the forums, but haven't found anything that would help me solve this yet. Please forgive if I missed something.
Here is what I want to achieve:
Port 5 shall be connected to a VLAN-aware switch and there shall be several VLANs on that switch. I started with vlan-home, which shall also be used for untagged traffic.
Here is my config:
jun/10/2018 10:35:42 by RouterOS 6.42.3
model = RouterBOARD 750G r3
/interface bridge
add name=bridge
add fast-forward=no name=bridge-ether5 pvid=10 vlan-filtering=yes
/interface vlan
add interface=bridge-ether5 name=vlan-home vlan-id=10
/interface ethernet switch port
set 0 default-vlan-id=2
set 1 default-vlan-id=2
set 2 default-vlan-id=2
set 3 default-vlan-id=2
set 4 default-vlan-id=10
set 5 default-vlan-id=2
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
add name=dhcp_pool2 ranges=10.0.0.2-10.0.0.254
/ip dhcp-server
add address-pool=default-dhcp disabled=no interface=bridge name=defconf
add address-pool=dhcp_pool2 disabled=no interface=vlan-home name=dhcp1
/interface bridge port
add bridge=bridge interface=ether2 pvid=2
add bridge=bridge interface=ether3 pvid=2
add bridge=bridge interface=ether4 pvid=2
add bridge=bridge-ether5 interface=ether5 pvid=10
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface bridge vlan
add bridge=bridge-ether5 untagged=vlan-home vlan-ids=10
/interface list member
add interface=ether1 list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=192.168.88.0
add address=10.0.0.1/24 interface=vlan-home network=10.0.0.0
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid disabled=no interface=ether1
/ip dhcp-server network
add address=10.0.0.0/24 gateway=10.0.0.1
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router.lan
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN
/system clock
set time-zone-name=Europe/Vienna
/system routerboard settings
set silent-boot=no
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
I have a rasperry pi connected to port5 to test if vlan-home and the DHCP server are working, but it doesn't. The Pi will not get an IP and with manual setup I am not able to ping the router. I would assume, that untagged traffic also goes to vlan-home and it should work...