Cant ping from vlan to lan interface

RouterOS Beginner Basics
1

Hi community this is my actual configuration, i need to be able to ping from all the vlans to whatever is connected on interface 6 which is a DC, i added a bridge but the only vlan cant ping that DC in interface 6 is vlan 10

2025-02-25 23:11:13 by RouterOS 7.14.1

software id = DJ21-EIQP

/interface bridge
add name=bridge1
/interface ethernet
set [ find default-name=ether1 ] disable-running-check=no
set [ find default-name=ether2 ] disable-running-check=no
set [ find default-name=ether3 ] disable-running-check=no
set [ find default-name=ether4 ] disable-running-check=no
set [ find default-name=ether5 ] disable-running-check=no
set [ find default-name=ether6 ] disable-running-check=no
/interface vlan
add interface=ether2 name=vlan10 vlan-id=10
add interface=ether2 name=vlan20 vlan-id=20
add interface=ether2 name=vlan30 vlan-id=30
add interface=ether2 name=vlan40 vlan-id=40
/ip pool
add name=dhcp_pool0 ranges=10.0.10.1-10.0.10.254
add name=dhcp_pool1 ranges=10.0.20.1-10.0.20.254
add name=dhcp_pool2 ranges=10.0.30.1-10.0.30.254
add name=dhcp_pool3 ranges=10.0.40.1-10.0.40.254
/ip dhcp-server
add address-pool=dhcp_pool0 interface=vlan10 name=dhcp1
add address-pool=dhcp_pool1 interface=vlan20 name=dhcp2
add address-pool=dhcp_pool2 interface=vlan30 name=dhcp3
add address-pool=dhcp_pool3 interface=vlan40 name=dhcp4
/interface bridge port
add bridge=bridge1 interface=ether6
add bridge=bridge1 ingress-filtering=no interface=ether2
/ip address
add address=10.0.10.0/24 interface=vlan10 network=10.0.10.0
add address=10.0.20.0/24 interface=vlan20 network=10.0.20.0
add address=10.0.30.0/24 interface=vlan30 network=10.0.30.0
add address=10.0.40.0/24 interface=vlan40 network=10.0.40.0
add address=192.168.0.5/24 interface=ether6 network=192.168.0.0
/ip dhcp-client
add interface=ether1
/ip dhcp-server network
add address=10.0.10.0/24 gateway=10.0.10.0
add address=10.0.20.0/24 gateway=10.0.20.0
add address=10.0.30.0/24 gateway=10.0.30.0
add address=10.0.40.0/24 gateway=10.0.40.0
/ip dns
set servers=192.168.0.10
/ip firewall filter
add action=accept chain=forward disabled=yes dst-address=192.168.0.10
src-address=10.0.10.254
add action=accept chain=input in-interface=bridge1
/ip firewall mangle
add action=accept chain=forward in-interface=bridge1 out-interface=vlan20
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
add action=masquerade chain=srcnat disabled=yes out-interface=bridge1
add action=masquerade chain=srcnat disabled=yes out-interface=vlan20
/ip route
add disabled=no distance=1 dst-address=10.0.10.0/32 gateway=bridge1 pref-src=
"" routing-table=main scope=30 suppress-hw-offload=no target-scope=10
add disabled=no distance=3 dst-address=10.0.20.0/32 gateway=bridge1 pref-src=
"" routing-table=main scope=30 suppress-hw-offload=no target-scope=10
/system note
set show-at-login=no

2

chenge: 0/24 to 1/24

/ip address
add address=10.0.10.0/24 interface=vlan10 network=10.0.10.0
add address=10.0.20.0/24 interface=vlan20 network=10.0.20.0
add address=10.0.30.0/24 interface=vlan30 network=10.0.30.0
add address=10.0.40.0/24 interface=vlan40 network=10.0.40.0
/ip dhcp-server network
add address=10.0.10.0/24 gateway=10.0.10.0
add address=10.0.20.0/24 gateway=10.0.20.0
add address=10.0.30.0/24 gateway=10.0.30.0
add address=10.0.40.0/24 gateway=10.0.40.0
3

To clarify to the /ip address settings. and why no dns-server= on the dhcp-server network settings??

4

should i use my DC dns?

5

You can not use .0 IPs for addresses, nor for gateway, and also the pools must start from 2, not from 1.

Where you find this s~y config?

6

i did and still no difference

7

i used the dhcp setup it give me that by default

8

no difference because @panisk0 do not finish the corrections

9

I don’t believe it even if you make a video.

First you made the VLANs, then you put the IPs randomly, then when you launched the DHCP setup it adapted to the bu–it you wrote before.

10

i have modified all vlans as suggested and all the pools now start at 2

11

I have pointed out the errors in general, then if something goes wrong, first draw a diagram of how things should go,
then @anav will guide you (if you listen to him and are cooperative) in what you need.

Post also a “fresh” export

12

2025-02-26 13:19:20 by RouterOS 7.14.1

software id = DJ21-EIQP

/interface bridge
add name=bridge1
/interface ethernet
set [ find default-name=ether1 ] disable-running-check=no
set [ find default-name=ether2 ] disable-running-check=no
set [ find default-name=ether3 ] disable-running-check=no
set [ find default-name=ether4 ] disable-running-check=no
set [ find default-name=ether5 ] disable-running-check=no
set [ find default-name=ether6 ] disable-running-check=no
/interface vlan
add interface=ether2 name=vlan10 vlan-id=10
add interface=ether2 name=vlan20 vlan-id=20
add interface=ether2 name=vlan30 vlan-id=30
add interface=ether2 name=vlan40 vlan-id=40
/ip pool
add name=dhcp_pool5 ranges=10.0.20.2-10.0.20.254
add name=dhcp_pool6 ranges=10.0.10.2-10.0.10.254
add name=dhcp_pool7 ranges=10.0.30.2-10.0.30.254
add name=dhcp_pool8 ranges=10.0.40.2-10.0.40.254
/ip dhcp-server
add address-pool=dhcp_pool5 interface=vlan20 name=dhcp2
add address-pool=dhcp_pool6 interface=vlan10 name=dhcp1
add address-pool=dhcp_pool7 interface=vlan30 name=dhcp3
add address-pool=dhcp_pool8 interface=vlan40 name=dhcp4
/interface bridge port
add bridge=bridge1 interface=ether6
add bridge=bridge1 ingress-filtering=no interface=ether2
/ip address
add address=10.0.10.1/24 interface=vlan10 network=10.0.10.0
add address=10.0.20.1/24 interface=vlan20 network=10.0.20.0
add address=10.0.30.1/24 interface=vlan30 network=10.0.30.0
add address=10.0.40.1/24 interface=vlan40 network=10.0.40.0
add address=192.168.0.5/24 interface=ether6 network=192.168.0.0
/ip dhcp-client
add interface=ether1
/ip dhcp-server network
add address=10.0.10.0/24 dns-server=192.168.2.1,192.168.0.10 gateway=
10.0.10.1
add address=10.0.20.0/24 dns-server=192.168.2.1,192.168.0.10 gateway=
10.0.20.1
add address=10.0.30.0/24 dns-server=192.168.2.1,192.168.0.10 gateway=
10.0.30.1
add address=10.0.40.0/24 dns-server=192.168.2.1,192.168.0.10 gateway=
10.0.40.1
/ip dns
set servers=192.168.0.10
/ip firewall filter
add action=accept chain=input in-interface=bridge1
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
/ip route
add disabled=no distance=1 dst-address=10.0.10.0/32 gateway=bridge1 pref-src=
"" routing-table=main scope=30 suppress-hw-offload=no target-scope=10
add disabled=no dst-address=10.0.20.1/32 gateway=bridge1 routing-table=main
suppress-hw-offload=no
/system note
set show-at-login=no

13

Sorry Im still stuck on S…Y :wink:

Cant decide between scary shady sorry or shitty LOL

14
  1. Whats the point of a bridge and vlan filtering if you add your vlans to ether2 LOL.
  2. Before working further on the config, need some facts.

A. If the device on ether6 can have any IP address in the 192.168.0.0/24 subnet, then why use 192.168.0.5/24 instead of the normal 192.168.0.1/24
Cute for no reason???

B. Then in DNS settings, where the heck does 192.168.0.10 come from and SAME SAME for the 192.168.2.1 private subnet???
Perhaps the private address is the gateway IP of the ISP router LAN subnet providing a private WANIP to the MT device???

C. What is on ether ports 2,3,4,5 ( dumb devices and if so which vlan ) smart device (switch/ap) and if so what vlans are trunked to the device>
D. Which is the trusted VLAN on this network?

15

A. That is basically how is connected, port ether6 acts a dhcp client for the virtual network in the same network than the DC server
B.Yes 192.168.2.1 is the dns for my home router, all from the routerOS to the dc are bein virtualized on vmware
C. I added those ports to being used for each vlan, but since i am just experimenting and learning i decided to send everything over ether2 port
D.Not sure what a trusted vlan is
image.png

16

Sorry no clue how to handle VMS, hopefully someone else can.