config DHCP server on Vlan

RouterOS General
1

Hello ,
I’m trying to make my VLAN be a DHCP server
but it won’t work - It doesn’t give IP to devices that connected
and also even if I give my computer and IP from the smae network I can’t see the router
what am I missing?
this is the config I have -

/interface bridge
add l2mtu=1524 name=bridge1 protocol-mode=rstp
/interface wireless
set [ find default-name=wlan2 ] antenna-mode=ant-b disabled=no frequency=5280 \
    frequency-mode=superchannel l2mtu=2290 mode=station-pseudobridge name=\
    wlan1-5Ghz radio-name=Unit3-103 scan-list=5200-5300 ssid=BeezzBH \
    tx-power=1 tx-power-mode=card-rates wireless-protocol=802.11 wmm-support=\
    enabled
/interface ethernet
set [ find default-name=ether1 ] name="ether1-Not use"
set [ find default-name=ether2 ] name=ether2-vlan
set [ find default-name=ether3 ] name=ether3-Computer
/interface vlan
add interface=ether2-vlan l2mtu=1520 name=vlan1 vlan-id=10
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=3GRouter
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none keepalive-timeout=5m \
    mac-cookie-timeout=3d shared-users=60
/ip pool
add name=dhcp_pool1 ranges=192.168.1.1-192.168.1.20
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=vlan1 name=dhcp1
/interface bridge filter
add chain=forward
/interface bridge port
add bridge=bridge1 interface=wlan1-5Ghz
add bridge=bridge1 interface=ether3-Computer
/interface bridge settings
set use-ip-firewall=yes use-ip-firewall-for-vlan=yes
/ip address
add address=10.0.0.103/24 interface=bridge1 network=10.0.0.0
add address=192.168.1.254/24 interface=vlan1 network=192.168.1.0
/ip dhcp-server config
set store-leases-disk=never
/ip dhcp-server network
add address=192.168.1.0/24 dns-server=0.0.0.0 gateway=192.168.1.254
/ip route
add distance=1 dst-address=192.168.1.0/24 gateway=10.0.0.105
2

The problem is that ether2 only responds to packets with set vlan 10 tag which your clients most probably don’t have. The simplest solution would be to make vlan10 interface on your bridge1 than make a new bridge lets say vlan10-bridge and add both ether2 and vlan10 as ports to vlan10-bridge. Make your dhcp server for vlan10 run on vlan10-bridge.

JF.

3

still not good
or maybe I did something wrong?
the DHCP is in red now

/interface bridge
add l2mtu=1524 name=bridge1 protocol-mode=rstp
add l2mtu=1520 name=vlan10-bridge protocol-mode=rstp
/interface wireless
set [ find default-name=wlan2 ] antenna-mode=ant-b disabled=no frequency=5280 \
    frequency-mode=superchannel l2mtu=2290 mode=station-pseudobridge name=\
    wlan1-5Ghz radio-name=Unit3-103 scan-list=5200-5300 ssid=BeezzBH \
    tx-power=1 tx-power-mode=card-rates wireless-protocol=802.11 wmm-support=\
    enabled
/interface ethernet
set [ find default-name=ether1 ] name="ether1-Not use"
set [ find default-name=ether2 ] name=ether2-oem
set [ find default-name=ether3 ] name=ether3-Computer
/interface vlan
add interface=ether2-oem l2mtu=1520 name=vlan1 vlan-id=10
add interface=bridge1 l2mtu=1520 name=vlan10 vlan-id=1
/interface wireless
add mac-address=02:15:6D:63:5F:17 master-interface=wlan-2.4Ghz-hotspot name=\
    vap ssid=test wds-cost-range=0 wds-default-cost=0
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=3GRouter
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none keepalive-timeout=5m \
    mac-cookie-timeout=3d shared-users=60
/ip pool
add name=dhcp_pool1 ranges=192.168.1.1-192.168.1.20
add name=dhcp_pool2 ranges=192.168.1.120-192.168.1.150
/ip dhcp-server
add address-pool=dhcp_pool2 disabled=no interface=vlan10-bridge name=dhcp1 \
    relay=192.168.1.254
/interface bridge filter
add chain=forward
/interface bridge port
add bridge=bridge1 interface=wlan1-5Ghz
add bridge=bridge1 interface=ether3-Computer
add bridge=vlan10-bridge interface=ether2-oem
add bridge=vlan10-bridge interface=vlan10
/interface bridge settings
set use-ip-firewall=yes use-ip-firewall-for-vlan=yes
/ip address
add address=10.0.0.103/24 interface=bridge1 network=10.0.0.0
add address=192.168.1.254/24 interface=vlan1 network=192.168.1.0
/ip dhcp-server config
set store-leases-disk=never
/ip dhcp-server network
add address=192.168.1.0/24 dns-server=0.0.0.0 gateway=192.168.1.254
/ip route
add distance=1 dst-address=192.168.1.0/24 gateway=10.0.0.105
4

You must either set the apropiate vlanid in your network card(if it has this feature) or use the switch chip feature to untagg packets http://wiki.mikrotik.com/wiki/Manual:Switch_Chip_Features
Examples here http://forum.mikrotik.com/t/vlan-dhcp/75540/23

5

DHCP is red because you have to put it on vlan10-bridge not on interface vlan1.

JF.

6

I did what you have said
now the computer is getting IP address , but I don’t have a ping to the other unit
(from the first router I get the DHCP - and I have a ping to the other router )

this is what I have now

/interface bridge
add l2mtu=1524 name=bridge1 protocol-mode=rstp
add l2mtu=1520 name=vlan10-bridge protocol-mode=rstp
/interface wireless
set [ find default-name=wlan2 ] antenna-mode=ant-b disabled=no frequency=5280 \
    frequency-mode=superchannel l2mtu=2290 mode=station-pseudobridge name=\
    wlan1-5Ghz radio-name=Unit3-103 scan-list=5200-5300 ssid=BeezzBH \
    tx-power=1 tx-power-mode=card-rates wireless-protocol=802.11 wmm-support=\
    enabled
/interface ethernet
set [ find default-name=ether1 ] name="ether1-Not use"
set [ find default-name=ether2 ] name=ether2-oem
set [ find default-name=ether3 ] name=ether3-Computer
/interface vlan
add interface=ether2-oem l2mtu=1520 name=vlan1 vlan-id=10
add interface=bridge1 l2mtu=1520 name=vlan10 vlan-id=15
/interface wireless
add mac-address=02:15:6D:63:5F:17 master-interface=wlan-2.4Ghz-hotspot name=\
    vap ssid=test wds-cost-range=0 wds-default-cost=0
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=3GRouter
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none keepalive-timeout=5m \
    mac-cookie-timeout=3d shared-users=60
/ip pool
add name=dhcp_pool1 ranges=192.168.1.1-192.168.1.20
add name=dhcp_pool2 ranges=192.168.1.120-192.168.1.150
add name=dhcp_pool3 ranges=192.168.1.150-192.168.1.170
/ip dhcp-server
add address-pool=dhcp_pool3 disabled=no interface=vlan10-bridge name=dhcp1
/interface bridge port
add bridge=bridge1 interface=wlan1-5Ghz
add bridge=bridge1 interface=ether3-Computer
add bridge=vlan10-bridge interface=ether2-oem
add bridge=vlan10-bridge interface=vlan10
/interface bridge settings
set use-ip-firewall=yes use-ip-firewall-for-vlan=yes
/ip address
add address=10.0.0.103/24 interface=bridge1 network=10.0.0.0
add address=192.168.1.254/24 interface=vlan10-bridge network=192.168.1.0
/ip dhcp-server config
set store-leases-disk=never
/ip dhcp-server network
add address=192.168.1.0/24 dns-server=0.0.0.0 gateway=192.168.1.254
7

First of all try to disable this part of your code:

/interface bridge settings
set use-ip-firewall=yes use-ip-firewall-for-vlan=yes

Set both to no, which is default. If it still doesn’t work check your firewall or post your firewall config here with some more description of your topology.
JF

8

O.K.
Now I can see that I get ping from 1 computer to another.(all good )
but I don’t see the data “moving” in the VLAN (I did ping from both computers and this is the result)
vlan.png

9

let say that this is O.K. , and this how it’s working

now I want to add another VAP to it
and just when I connect to the VAP I will get DHCP , when I connect to the Ethernet I don’t need the DHCP

how to do this?

10

I’m glad things are working fine … if you don’t need dhcp just pick one static IP address outside the dhcp-pool range and configure your computer to use that address.

11

this is not answering my question
I want to add VAP to this VLAN - and only him (AP) will give address

how to to this?