Hi friends,
I had to configure a VLAN on my board and put it on virtual wlan interface.
I found out that customers do not receive an ip address.
Аfter thorough investigation of the problem, I realized that a rule in the bridge for DHCP stops the packages also in the vlan.
My question - Why is it so that neither the vlan nor the Ethernet is involved in a bridge , only master wlan on my virtual ap?
When I set a bridge rule to use only the required bridge for in and out interface and everything was fine!
Did you check the wiki? [https://wiki.mikrotik.com/wiki/Manual:VLANs_on_Wireless]
if yes i can see the configuration
Firstly, there is a new and better reference.
https://wiki.mikrotik.com/wiki/Manual:Bridge_VLAN_Table
The kinds of settings you will need to think about.
Best to post your config for viewing/help
Need bridge=bridgehome
ip address, dhcp server, dhcp network and IP pool for regular lan network
need vlan-id=XX interface = bridgehome
IP address, dhcp server, dhcp network and ip pool for vlan network.
bridge ports (those etherports or wlans carrying vlans)
VWLAN XXX
/interface bridge vlan
bridge=bridgehome, tagged=bridgehome, VWLAN vlan-ids=xx
Oh, I’m sorry, I’m very … Ethernet1 is part of the bridge1 ! This may be the answer !
/interface bridge
add arp=proxy-arp comment="-- LAN --" fast-forward=no name=bridge1
add fast-forward=no name=bridge2
add name=bridge3
add name=bridge4
add igmp-snooping=yes name=bridge5
add fast-forward=no name=bridge6
/interface ethernet
set [ find default-name=ether1 ] speed=100Mbps
set [ find default-name=ether2 ] speed=100Mbps
set [ find default-name=ether3 ] speed=100Mbps
/interface vlan
add interface=ether1 name=vlan111 vlan-id=111
add interface=ether1 name=vlan222 vlan-id=222
add interface=ether1 name=vlan333 vlan-id=333
add comment=vlan999 interface=ether1 name=vlan999 vlan-id=999
/interface list
add name=WANs
add name=lans
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-g/n channel-width=20/40mhz-Ce country=japan4 default-authentication=no default-forwarding=no disabled=no distance=indoors frequency=2412 mac-address=00:A0:40:36:59:71 mode=ap-bridge radio-name="" rx-chains=0,1,2 tx-chains=0,1,2 wireless-protocol=802.11 wmm-support=enabled wps-mode=disabled
add default-authentication=no default-forwarding=no disabled=no keepalive-frames=disabled mac-address=02:A0:40:36:59:71 master-interface=wlan1 max-station-count=5 multicast-buffering=disabled name=wlan2 ssid=NoWay999 vlan-id=999 vlan-mode=use-tag wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
/ip pool
add name=dhcp_pool0 ranges=172.16.222.200-172.16.222.253
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=bridge1 lease-time=1d10m name=dhcp1
/interface bridge filter
add action=drop chain=forward dst-port=68 in-bridge=bridge1 ip-protocol=udp mac-protocol=ip out-bridge=bridge1 src-address=!172.16.222.254/32
/interface bridge port
add bridge=bridge1 interface=wlan1
add bridge=bridge2 interface=vlan111
add bridge=bridge3 interface=vlan222
add bridge=bridge4 interface=ether3
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=ether2
add bridge=bridge6 interface=vlan333
/ip settings
set rp-filter=strict tcp-syncookies=yes
/interface list member
add interface=bridge2 list=WANs
add interface=bridge3 list=WANs
add interface=bridge4 list=WANs
add interface=bridge6 list=WANs
add interface=vlan999 list=lans
add interface=bridge1 list=lans
/ip address
add address=192.168.101.2/30 interface=bridge2 network=192.168.101.0
add address=192.168.102.2/30 interface=bridge3 network=192.168.102.0
add address=172.16.222.254/24 interface=bridge1 network=172.16.222.0
add address=192.168.99.254/24 interface=bridge5 network=192.168.99.0
add address=192.168.100.2/30 interface=bridge6 network=192.168.100.0
/ip dhcp-client
add add-default-route=no dhcp-options=hostname,clientid disabled=no interface=bridge4 use-peer-dns=no use-peer-ntp=no
/ip dhcp-server network
add address=172.16.222.0/24 dns-server=172.16.222.254 gateway=172.16.222.254
/ip dns
set allow-remote-requests=yes cache-max-ttl=1w3d cache-size=4096KiB query-total-timeout=14s servers="208.67.220.220,208.67.222.222,8.8.8.8,4.2.2.1,64.6.64.6,77.88.8.8,80.80.80.80"
/ip route
add check-gateway=ping distance=2 gateway=4.2.2.1
add check-gateway=ping distance=4 gateway=4.2.2.2
add check-gateway=ping distance=5 gateway=4.2.2.4
add check-gateway=ping disabled=yes distance=1 gateway=4.2.2.3
add distance=1 dst-address=4.2.2.1/32 gateway=192.168.100.1 scope=10
add distance=1 dst-address=4.2.2.2/32 gateway=192.168.102.1 scope=10
add distance=1 dst-address=4.2.2.3/32 gateway=192.168.103.1 scope=10
add distance=1 dst-address=4.2.2.4/32 gateway=192.168.101.1 scope=10
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set www-ssl address=yes
set api disabled=yes
set winbox port=xxx
set api-ssl disabled=yes
/ip smb
set allow-guests=no domain=WORKGROUP enabled=yes interfaces=bridge1
/ip smb shares
add directory=/disk1 name=share1
/ip smb users
add name=xxx read-only=no
/ip ssh
set host-key-size=4096 strong-crypto=yes
/system routerboard settings
set silent-boot=no
A rudimentary start but lots of missing information.
/interface bridge
add arp=proxy-arp comment="-- LAN --" fast-forward=no name=bridge1
/interface ethernet
set [ find default-name=ether1 ] speed=100Mbps
set [ find default-name=ether2 ] speed=100Mbps
set [ find default-name=ether3 ] speed=100Mbps
WHERE IS YOUR ISP ETHERNET INTERFACE????
/interface vlan
add interface=bridge1 name=vlan111 vlan-id=111
add interface=bridge1 name=vlan222 vlan-id=222
add interface=bridge1 name=vlan333 vlan-id=333
add interface=bridge1 name=vlan999 vlan-id=999
/interface list
add name=WANs
add name=lans
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-g/n channel-width=20/40mhz-Ce country=japan4 default-authentication=no default-forwarding=no disabled=no distance=indoors frequency=2412 mac-address=00:A0:40:36:59:71 mode=ap-bridge radio-name="" rx-chains=0,1,2 tx-chains=0,1,2 wireless-protocol=802.11 wmm-support=enabled wps-mode=disabled
add default-authentication=no default-forwarding=no disabled=no keepalive-frames=disabled mac-address=02:A0:40:36:59:71 master-interface=wlan1 max-station-count=5 multicast-buffering=disabled name=wlan2 ssid=NoWay999 vlan-id=999 vlan-mode=use-tag wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
/ip pool
add name=dhcp_pool0 ranges=172.16.222.200-172.16.222.253
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=bridge1 lease-time=1d10m name=dhcp1
/ip dhcp-server network
add address=172.16.222.0/24 dns-server=172.16.222.254 gateway=172.16.222.254
/interface bridge port
add bridge=bridge1 interface=wlan1
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
/interface list member
add interface=bridge1 list=LANs
add interface=ISP =WANs
/ip address
add address=192.168.101.2/30 interface=bridge1 network=192.168.101.0 (VLAN???)
add address=192.168.102.2/30 interface=bridge1 network=192.168.102.0 (VLAN???)
add address=172.16.222.254/24 interface=ethe???? network=172.16.222.0 (LAN)
add address=192.168.99.254/24 interface=bridge1 network=192.168.99.0 (VLAN???)
add address=192.168.100.2/30 interface=bridge1 network=192.168.100.0 (VLAN???)
WHERE ARE IP POOLS DHCP SERVER and NETWORKS for VLANS???
WHERE ARE /INTERFACE BRIDGE VLAN RULES??/?
/ip dhcp-client
add add-default-route=no dhcp-options=hostname,clientid disabled=no interface=??????? use-peer-dns=no use-peer-ntp=no
Now everything works after I added in-bridge and out-bridge on bridge filter rule:
/interface bridge filter
add action=drop chain=forward dst-port=68 in-bridge=bridge1 ip-protocol=udp mac-protocol=ip out-bridge=bridge1 src-address=!172.16.222.254/32
My configuration is less complex. I have one openvpn with BCP extend my L2 network on remote place , one sstp connection with BCP at the same time srcnat routed to other network, other vpn/wireguard/ on openwrt LAN device , 4 WAN with failover / 3 on vlans and 1 on ethernet / .
Anyway, thanks for the suggestions, but in my case I can not fully use the vlan filtering on the bridges!