Configuring VLANs and Routing on CRS317, CRS106 and CRS260GS - Technical Support

RouterOS Beginner Basics
1

Hello,
I’m designing, a technological network that will not be connected to the Internet. I have 3 Mikrotik switches, CRS317, CRS106 and CRS260GS.
My goal is to create 2 VLANs: the first with the address 192.168.4.0/24 and the second with the address 192.0.1.0/24. I would like the device with address 192.168.4.200/24 to have access to both networks. All configurations presented by the manufacturer assume an additional device that redirects traffic between VLANs. Is there a way to do this without having to use an additional router? If so, what would an example switch configuration look like?

Here is a topology drawing of my network
image.png

2

Yes, possible, I’d use the CRS317 and run it with ROS.
Do it as described here: https://wiki.mikrotik.com/wiki/Manual:Interface/Bridge#VLAN_Example_#3_(InterVLAN_Routing_by_Bridge)

BTW: 192.0.1.0/24 is NO RFC1918 compliant private network. I think you maybe meant 192.168.1.0/24

192.168.4.200/24 will always have acces to the 192.168.4.0/24 network, because itself is in that segment (traffic wont go over a router).
For routing to 192.168.1.0/24, you need to allow it when creating your firewall-rules. By default (if no rules are in place) ROS allows everything.

3

First of all, there is no such thing as a CRS260GS

Now witch this three:
CRS317, CRS106 and RB260GS(CSS106)

has to be configured differently to do the same tasks:
CRS317: Routeros Using Bridge Vlan Filtering
CRS106: Routeros Using Switch Menu
RB260/CSS106: SwOS Web config

4

192.0.1.0/24 is correct, there is a device which is hard coded on this ip adres.

Tomorrow I will try this method you linked to. Thanks

5

I tried the Mikrotik wiki setup, some trial and error, and it worked! Thank you for your reply.
Here is my config from the working setup

Switch 1:

/interface bridge
add name=SW-BR vlan-filtering=yes
/interface ethernet
set [ find default-name=sfp-sfpplus1 ] comment="Falownik F1"
set [ find default-name=sfp-sfpplus2 ] comment="Falownik F2"
set [ find default-name=sfp-sfpplus3 ] comment="Falownik F3"
set [ find default-name=sfp-sfpplus4 ] comment="Falownik F4"
set [ find default-name=sfp-sfpplus5 ] comment="Falownik F5"
set [ find default-name=sfp-sfpplus6 ] comment="Falownik F6"
set [ find default-name=sfp-sfpplus7 ] comment="Falownik F7"
set [ find default-name=sfp-sfpplus8 ] comment="Falownik F8"
set [ find default-name=sfp-sfpplus9 ] comment="Falownik F9"
set [ find default-name=sfp-sfpplus10 ] comment=AS
set [ find default-name=sfp-sfpplus11 ] comment=Mikronika
set [ find default-name=sfp-sfpplus12 ] comment=Router
set [ find default-name=sfp-sfpplus16 ] comment="Switch Elektrycy"
/interface vlan
add interface=SW-BR name=vlan10 vlan-id=10
add interface=SW-BR name=vlan20 vlan-id=20
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/ip pool
add name=dhcp_pool0 ranges=192.168.1.10-192.168.1.254
add name=dhcp_pool1 ranges=192.168.1.10-192.168.1.254
/port
set 0 name=serial0
/interface bridge port
add bridge=SW-BR interface=sfp-sfpplus1
add bridge=SW-BR interface=sfp-sfpplus2
add bridge=SW-BR interface=sfp-sfpplus3
add bridge=SW-BR interface=sfp-sfpplus4
add bridge=SW-BR interface=sfp-sfpplus5
add bridge=SW-BR interface=sfp-sfpplus6
add bridge=SW-BR interface=sfp-sfpplus7
add bridge=SW-BR interface=sfp-sfpplus8
add bridge=SW-BR interface=sfp-sfpplus9
add bridge=SW-BR interface=sfp-sfpplus10 pvid=10
add bridge=SW-BR interface=sfp-sfpplus11 pvid=20
add bridge=SW-BR interface=sfp-sfpplus12
add bridge=SW-BR interface=sfp-sfpplus13
add bridge=SW-BR interface=sfp-sfpplus14
add bridge=SW-BR interface=sfp-sfpplus15
add bridge=SW-BR interface=sfp-sfpplus16
/ip neighbor discovery-settings
set discover-interface-list=all
/interface bridge vlan
add bridge=SW-BR tagged=SW-BR,sfp-sfpplus16 untagged=sfp-sfpplus10 vlan-ids=10
add bridge=SW-BR tagged=SW-BR,sfp-sfpplus16 untagged=sfp-sfpplus11 vlan-ids=20
/ip address
add address=192.0.1.254/24 interface=vlan20 network=192.0.1.0
add address=192.168.1.1/24 interface=vlan10 network=192.168.1.0
/ip dhcp-server network
add address=192.168.1.0/24 gateway=192.168.1.1
/system identity
set name="Switch Kot\B3ownia"
/system note
set show-at-login=no
/system routerboard settings
set boot-os=router-os
/tool romon
set enabled=yes

Switch 2:

/interface bridge
add name=SW-BR vlan-filtering=yes
/interface ethernet
set [ find default-name=combo1 ] comment="Switch Kot\B3ownia"
set [ find default-name=sfp1 ] comment="Komputer elektrycy"
set [ find default-name=sfp2 ] comment="Komputer HP"
set [ find default-name=sfp4 ] comment=TW5
set [ find default-name=sfp5 ] comment="Switch Bud. G\A3"
/interface vlan
add interface=SW-BR name=vlan10 vlan-id=10
add interface=SW-BR name=vlan20 vlan-id=20
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/port
set 0 name=serial0
/interface bridge port
add bridge=SW-BR interface=combo1
add bridge=SW-BR interface=sfp1 pvid=10
add bridge=SW-BR interface=sfp2 pvid=10
add bridge=SW-BR interface=sfp3
add bridge=SW-BR interface=sfp4 pvid=20
add bridge=SW-BR interface=sfp5
/ip neighbor discovery-settings
set discover-interface-list=all
/interface bridge vlan
add bridge=SW-BR tagged=combo1,SW-BR untagged=sfp1,sfp2 vlan-ids=10
add bridge=SW-BR tagged=combo1,SW-BR untagged=sfp4 vlan-ids=20
/interface list member
add interface=combo1 list=WAN
add interface=sfp1 list=LAN
add interface=sfp2 list=LAN
add interface=sfp3 list=LAN
add interface=sfp4 list=LAN
add interface=sfp5 list=LAN
/ip address
add address=192.0.1.253/24 interface=vlan20 network=192.0.1.0
add address=192.168.1.2/24 interface=vlan10 network=192.168.1.0
/system identity
set name=Switch_Elektrycy
/system note
set show-at-login=no
/tool romon
set enabled=yes