Cannot get VLANs working between two routers

Hello all,

I'm working on the following configuration:

TL-SG3216 <---TRUNK---> (via Binding from ether1 and ether2 ) RB2011UiAS-RM (via ether3) <---TRUNK---> (via ether1) RB951G-2HnD

I have the following VLANs created on RB2011UiAS-RM:
Flags: X - disabled, R - running, S - slave

NAME MTU ARP VLAN-ID INTERFACE

0 R vlan100-mgt 1500 enabled 100 bridge1-trunk
1 R ;;; Servers VLAN
vlan200-srv 1500 enabled 200 bridge1-trunk
2 R vlan300-euc 1500 enabled 300 bridge1-trunk
3 R ;;; DMZ VLAN
vlan400-dmz 1500 enabled 400 bridge1-trunk
4 R ;;; Guest VLAN
vlan500-gst 1500 enabled 500 bridge1-trunkwith the following IP addresses assigned:

ADDRESS NETWORK INTERFACE

0 ;;; Management network
10.1.1.1/24 10.1.1.0 vlan100-mgt
1 ;;; Servers network
10.1.2.1/24 10.1.2.0 vlan200-srv
2 ;;; End user devices network
10.1.3.1/24 10.1.3.0 vlan300-euc
3 ;;; DMZ network
10.1.4.1/24 10.1.4.0 vlan400-dmz
4 ;;; Guest network
10.1.5.1/24 10.1.5.0 vlan500-gstThere's a single bridge created on this router:
R name="bridge1-trunk" mtu=1500 l2mtu=1598 arp=enabled
mac-address=4C:5E:0C:45:44:2C protocol-mode=rstp priority=0x8000
auto-mac=yes admin-mac=00:00:00:00:00:00 max-message-age=20s
forward-delay=15s transmit-hold-count=6 ageing-time=5mAt this point, I have multiple devices from different VLANs plugged into TL-SG3216 and I have no problem communicating between them.

The issues starts getting RB951G-2HnD to work. I need it to have the following VLANs:
Flags: X - disabled, R - running, S - slave

NAME MTU ARP VLAN-ID INTERFACE

0 R ;;; Management VLAN
vlan100-mgt 1500 enabled 100 bridge1-trunk
1 R ;;; End user devices VLAN
vlan300-euc 1500 enabled 300 bridge1-trunk
2 R ;;; Guest VLAN
vlan500-gst 1500 enabled 500 bridge1-trunkI've configured bridges on them as following:
Flags: X - disabled, R - running
0 R name="bridge1-trunk" mtu=1500 l2mtu=1598 arp=enabled
mac-address=D4:CA:6D:0D:FE:60 protocol-mode=rstp priority=0x8000
auto-mac=yes admin-mac=00:00:00:00:00:00 max-message-age=20s
forward-delay=15s transmit-hold-count=6 ageing-time=5m

1 X name="bridge2-euc" mtu=1500 arp=enabled mac-address=00:00:00:00:00:00
protocol-mode=rstp priority=0x8000 auto-mac=yes
admin-mac=00:00:00:00:00:00 max-message-age=20s forward-delay=15s
transmit-hold-count=6 ageing-time=5m

2 X name="bridge3-gst" mtu=1500 arp=enabled mac-address=D4:CA:6D:0D:FE:64
protocol-mode=rstp priority=0x8000 auto-mac=yes
admin-mac=00:00:00:00:00:00 max-message-age=20s forward-delay=15s
transmit-hold-count=6 ageing-time=5mAnd IP addresses as following:
Flags: X - disabled, I - invalid, D - dynamic

ADDRESS NETWORK INTERFACE

0 ;;; Management network
10.1.1.2/24 10.1.1.0 ether1-up
1 X 10.1.3.2/24 10.1.3.0 vlan300-euc
2 X 10.1.5.2/24 10.1.5.0 vlan500-gstAnyhow, the routers cannot communicate with each other and I cannot access any devices connected to this router.

I tried many different configurations (e.g. attaching VLANs directly to the ports, without bridges; using different bridges for each trunk etc.), but I cannot get this working. I guess I'm missing something simple, but, as this is my first meeting with RouterOS and I'm not really a network guy, it's seems complicated.

Thank you all in advance.

OK, it seems I managed to get this working by using switch features instead of bridges :slight_smile:

You would probably be better to export the config(s) using /export compact. Those snippets leave unanswered questions.

Thanks, I’ll do that in the future. This time, the problem is solved.