Hi Guys,
I just cant seem to get my head around a simple vlan config.
ver 6.46.4
eth1 comes from a ubiquity switch that has the lan port configured with vlan 1 (Native) as un tagged and vlan 189 as tagged.
eth4 is vlan 1 native (part of bridge that has eth1,2,3,4,5)
eth3 needs to be an access port to vlan 189 (native).
thats it nothing more. I have looked at the manual but every thing I have tried i have been unable to get it to work.
Please help me…
Thanks
What MT device are you using?
Thanks for the reply
I am using RB960PGS
So its not doing any routing its just a switch??
Or are you saying that its acting as a router and its static WANIP is ??? and if so on which VLAN???
only switch.. everything is turned off. no firewall no dhcp, nothing…
just bridge1 with all 5 ports part of that bridge.
I wish it was SWOS (that I know how to get working.. super simple ,like me) but that device uses ROS and I am at a loss…
https://i.mt.lv/cdn/rb_files/RB960PGS-161220141841.png
QCA8337 chip used
https://wiki.mikrotik.com/wiki/Manual:Switch_Chip_Features#Setup_Examples
example 2 should be close (you can skip most of the page)
As VLAN1 is offered untagged it is seen as no VLAN traffic ! (use “default-vlan-id” for untagged traffic)
Actually example 2 is not so different from SWOS :example 2 : https://wiki.mikrotik.com/wiki/SwOS/CSS106-VLAN-Example
Since there is no routing would it make sense to use hardware type vlan approach (and not what I am used to which is bridge software vlan approach).
Would it be best to take the router default setup and Bridge all The ports and remove dhcp server / client from all interfaces.
OR when resetting to defaults choose quickset Bridge Mode (vice Router mode) and assume this auto selects bridge all ports (an option on the quickset page).
Post your config here to look at…
A diagram would be helpful as your explanation is convoluted
Thanks for the response anav..
Switching is fine but the requirements are untagged vlan 1 on ether1 and tagged 189 on ether 1 (cisco equivalent to trunk?
ether 2 untaged vlan 1 (cisco equivalent access port vlan 1 native/untagged)
ether 3 untagged vlan 189 (cisco equivalent access port vlan 189 native/untagged)
Tried :example 2 : https://wiki.mikrotik.com/wiki/SwOS/CSS106-VLAN-Example but it does not work..
Okay I will have a look at my 260Gs configs and see what I can surmise…
LINK
Port1 - from UBIQUITI (Trunk Port, vlan189,1)
Port2 - To deviceA (access port vlan1)
Port3 - To device B (access port vlan 189)
VLAN
From Ubiquiti - vlanmode=enabled, vlanreceive=any, defaultvlanid=1, vlanheader= leave as is
To deviceA - vlanmode=strict, vlanreceive=only untagged, defaultvlanid=1, vlanheader= always strip
To deviceB - vlanmode=strict, vlanreceive=only untagged, defaultvlanid=189, vlanheader= always strip
VLANS
vlanid=1 leaveasis (ubiquiti), leaveasis (TodeviceA), notamember (TodeviceB)
vlanid=189 leaveasis (ubiquiti), notamember (TodeviceA), leaveasis (TodeviceB)
Thanks everyone... this worked for me (changed port 2 to port 5)
This was the trick:
add independent-learning=no ports=ether1,ether2 switch=switch1 vlan-id=1
and vlan leave-as-is for this switch chip
\
/interface bridge
add name=bridge1 protocol-mode=none
/interface ethernet switch port
set 0 vlan-mode=secure
set 2 default-vlan-id=189 vlan-mode=secure
/interface bridge port
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5
add bridge=bridge1 interface=sfp1
/interface ethernet switch vlan
add independent-learning=yes ports=ether1,ether3 switch=switch1 vlan-id=189
add independent-learning=no ports=ether1,ether2 switch=switch1 vlan-id=1
/interface list member
add interface=ether1 list=WAN
add interface=ether2 list=LAN
add interface=ether3 list=LAN
add interface=ether4 list=LAN
add interface=ether5 list=LAN
add interface=sfp1 list=LAN
I would never have gotten there LOL. Glad its solved.
OK, I think we all learn here.
One single tiny tiny detail … ether interfaces are slave interfaces to the bridge for RouterOS. Therefore the bridge should be in the LAN interface list. (Only has impact on config lines, like default firewall rules, where LAN is used to reference the interfaces, and there are probably none as this is a bridged.configuration) Having ether1 on the WAN list is just cosmetic, as ether1 is a slave interface to the bridge.
Well i was like 90% there with your guys help..
Then i just tried al kinds of tweeks until bingo 