Converting my Cisco config

RouterOS Beginner Basics
1

I have a Cisco 3560 switch doing advanced routing. I was wondering how to convert this to RouterOS config. I am using a cloud router.

I’d like the ports to now be trunks as well to route multipule vlans across:

spanning-tree mode rapid-pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
vlan 10
 name local_192.168.0.0
!
vlan 50
 name DMZ_01
!
vlan 51
 name DMZ_02
!
ip ssh source-interface FastEthernet0/1
ip ssh version 2
!
!
!
interface FastEthernet0/1
 description Local_Access
 switchport access vlan 10
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/2
 description WAN
 no switchport
 ip address 202.20.4.102 255.255.255.252
 speed 100
 duplex full
 no cdp enable
 no cdp tlv server-location
 no cdp tlv app
 spanning-tree portfast
 spanning-tree bpdufilter enable
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
 description DMZ_02
 switchport access vlan 51
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/14
 description DMZ_02
 switchport access vlan 51
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/15
 description DMZ_02
 switchport access vlan 51
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/16
 description DMZ_01
 switchport access vlan 50
 switchport mode access
 mls qos trust dscp
 spanning-tree portfast
!
interface FastEthernet0/17
 description DMZ_01
 switchport access vlan 50
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/18
 description DMZ_01
 switchport access vlan 50
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/19
 description DMZ_01
 switchport access vlan 50
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/20
 description DMZ_01
 switchport access vlan 50
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/21
 description DMZ_01
 switchport access vlan 50
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/22
 description DMZ_01
 switchport access vlan 50
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/23
!
interface FastEthernet0/24
 description Local_Access
 no switchport
 ip address 192.168.0.2 255.255.255.0
 no cdp enable
 no cdp tlv server-location
 no cdp tlv app
!
interface GigabitEthernet0/1
 description DMZ
 switchport access vlan 10
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet0/2
 description QNAP_NAS
 switchport access vlan 10
 switchport mode access
 spanning-tree portfast
!
interface Vlan1
 no ip address
 shutdown
!
interface Vlan50
 ip address 202.68.89.177 255.255.255.240
!
interface Vlan51
 ip address 202.68.89.153 255.255.255.248
!
ip classless
ip route 0.0.0.0 0.0.0.0 202.20.4.101
no ip http server
no ip http secure-server
2

I didn’t actually see any “routing” in this config in the layer 3 sense.

Do be aware that RouterOS does not support rapid-PVST. That is only an issue if there are redundant paths and other Cisco gear involved.

3

This is a switch.

Is it possible to make any of the Mikrotik gear act like this? The reason for this config is so you can plug in to any of the switch ports with a public IP address from any of the vlans and get internet access.

Maybe there is a better way to do it now?

4

Yes, create a bridge in replacement for your vlans and you can achieve the same as you have on that switch.

E.g. BRIDGE1=vlan10 then add any ports that needs to be on that segment onto that bridge interface.

The routed port on that switch is simple, just address an interface on the ccr.


Sent from my GT-I9100 using Tapatalk 2