Hey All, I’m new to MPLS/VPLS and I have been labing it for the last week and after following the Mikrotik WIKI I have all OSPF/MPLS/VPLS up and working but the last part of taking and implementing core DHCP servers on VLANs across to the end routers. Currently, I VLAN5 and VLAN6 built as interfaces and added to the VPLS-Bridge, I have IP Addresses and correlating DHCP servers assigned to those VLAN interfaces. As I look at my VPLS-Bridge where all of my VPLS tunnels live as well as now these two VLAN interfaces, everything is in a running state except those two VLAN interfaces, showing that they are in an Inactive state. Curious on what I may be missing in order for these to traverse my VPLS network?
Below is the configs from lab for the “core” router along with an endpoint.
Thanks in advance!
R1
[rtoadmin@R1] > export compact
# 2024-05-01 13:43:36 by RouterOS 7.14.3
# software id = TAF8-LEJX
#
# model = CCR1009-7G-1C
# serial number =
/interface bridge
add name=VPLS-Bridge
/interface ethernet
set [ find default-name=combo1 ] combo-mode=sfp l2mtu=1700 name=\
"combo1: WAN"
set [ find default-name=ether1 ] disabled=yes l2mtu=1700 name=\
"ether1: Dude-Server"
set [ find default-name=ether2 ] l2mtu=1700 name=\
"ether2: P2P-to-R2"
set [ find default-name=ether3 ] l2mtu=1700 name="ether3: P2P-to-R3"
set [ find default-name=ether4 ] l2mtu=1700 name=\
"ether4: P2P-to-R4"
set [ find default-name=ether5 ] l2mtu=1700 name=\
"ether5: P2P-to-R5"
set [ find default-name=ether6 ] disabled=yes l2mtu=1700 name="ether6: "
set [ find default-name=ether7 ] l2mtu=1700 name="ether7: Tech Access/DHCP"
/interface vpls
add arp=enabled bridge=VPLS-Bridge bridge-horizon=1 disabled=no mac-address=\
02:9D:1E:FF:8D:AD mtu=1500 name=VPLS-R1-to-R5 \
peer=10.10.10.14 pw-l2mtu=1580 pw-type=raw-ethernet vpls-id=10.10.10.14.1
add arp=enabled bridge=VPLS-Bridge bridge-horizon=1 disabled=no mac-address=\
02:42:08:85:9B:55 mtu=1500 name=VPLS-R1-to-R2 peer=\
10.10.10.11 pw-l2mtu=1580 pw-type=raw-ethernet vpls-id=10.10.10.11.1
add arp=enabled bridge=VPLS-Bridge bridge-horizon=1 disabled=no mac-address=\
02:6D:EF:3B:E5:AE mtu=1500 name=\
VPLS-R1-to-R4 peer=10.10.10.13 \
pw-l2mtu=1580 pw-type=raw-ethernet vpls-id=10.10.10.13.1
add arp=enabled bridge=VPLS-Bridge bridge-horizon=1 disabled=no mac-address=\
02:6B:EF:E5:B2:22 mtu=1500 name=VPLS-R1-To-R3 peer=\
10.10.10.12 pw-l2mtu=1580 pw-type=raw-ethernet vpls-id=10.10.10.12.1
/interface vlan
add interface=VPLS-Bridge name=VLAN-5-DHCP-Net.MGMT vlan-id=5
add interface=VPLS-Bridge name=VLAN6-DHCP-NAT use-service-tag=yes vlan-id=6
/interface lte apn
set [ find default=yes ] ip-type=ipv4 use-network-apn=no
/ip pool
add name="either7: Tech Access/DHCP" ranges=192.168.50.2-192.168.50.6
add name=VLAN6-DHCP-NAT ranges=172.30.0.2-172.30.3.254
add name=VLAN-5-DHCP-Net.MGMT ranges=172.16.0.2-172.16.3.254
/ip dhcp-server
add add-arp=yes address-pool="either7: Tech Access/DHCP" interface=\
"ether7: Tech Access/DHCP" lease-time=10m name="either7: Tech Access/DHCP"
add add-arp=yes address-pool=VLAN6-DHCP-NAT interface=VLAN6-DHCP-NAT \
lease-time=10m name=VLAN6-DHCP-NAT
add add-arp=yes address-pool=VLAN-5-DHCP-Net.MGMT interface=\
VLAN-5-DHCP-Net.MGMT lease-time=10m name=VLAN-5-DHCP-Net.MGMT
/port
set 0 name=serial0
set 1 name=serial1
/routing id
add disabled=no name=Loop-Back-ID select-dynamic-id=only-loopback \
select-from-vrf=main
/routing ospf instance
add disabled=no mpls-te-address=10.10.10.10 mpls-te-area=0.0.0.0 name=\
ospf-instance-Main originate-default=always router-id=Loop-Back-ID
/routing ospf area
add disabled=no instance=ospf-instance-Main name=ospf-area-Backbone
/dude
set data-directory=
/interface bridge port
add bridge=VPLS-Bridge horizon=1 interface=VLAN6-DHCP-NAT
add bridge=VPLS-Bridge horizon=1 interface=VLAN-5-DHCP-Net.MGMT
/ip firewall connection tracking
set udp-timeout=10s
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/ip settings
set max-neighbor-entries=8192
/ipv6 settings
set max-neighbor-entries=8192
/interface bridge vlan
add bridge=VPLS-Bridge tagged="VPLS-R1-To-R5_,VPLS-R\
1-To-R2,VPLS-R1-To-R4,VPLS-R1-To-R3" vlan-ids=1,5,6
/interface ovpn-server server
set auth=sha1,md5
/ip address
add address=192.168.50.1/29 interface="ether7: Tech Access/DHCP" network=\
192.168.50.0
add address=172.20.0.1/29 comment="R1 to R2" interface=\
"ether2: R1 to R2" network=172.20.0.0
add address=172.20.0.9/29 comment="R1 to R3" interface=\
"ether3: R1 to R3" network=172.20.0.8
add address=172.20.0.17/29 comment="R1 to R4" interface=\
"ether4: R1 to R4" network=172.20.0.16
add address=172.20.0.25/29 comment="R1 to R5" \
interface="ether5: R1 to R5" network=172.20.0.24
add address=172.20.0.33/29 disabled=yes
interface=*13 network=172.20.0.32
add address=172.30.0.1/22 comment=VLAN-5-DHCP-Net.MGMT interface=\
VLAN-5-DHCP-Net.MGMT network=172.30.0.0
add address=172.16.0.1/22 comment=VLAN6-DHCP-NAT interface=VLAN6-DHCP-NAT \
network=172.16.0.0
add address=10.10.10.10 interface=loop-back network=10.10.10.10
add address=192.168.3.1/30 disabled=yes interface="ether1: Dude-Server" \
network=192.168.3.0
/ip dhcp-client
add interface="combo1: WAN"
/ip dhcp-server network
add address=172.16.0.0/22 dns-server=8.8.8.8,8.8.4.4,1.1.1.1 gateway=172.16.0.1 \
netmask=22
add address=172.30.0.0/22 dns-server=8.8.8.8,8.8.4.4,1.1.1.1 gateway=172.30.0.1
add address=192.168.50.0/29 dns-server=8.8.8.8,1.1.1.1 gateway=192.168.50.1
/ip dns
set servers="8.8.8.8,8.8.4.4,1.1.1.1,1.0.0.1,208.67.222.222,208.67.220.220,9.9.9\
.9,149.112.112.112"
/ip firewall address-list
add address=10.0.0.0/8 list=rfc-1918
add address=172.16.0.0/12 list=rfc-1918
add address=192.168.0.0/16 list=rfc-1918
/ip firewall filter
add action=drop chain=input dst-port=53 in-interface="combo1: WAN" \
protocol=udp
add action=drop chain=input dst-port=53 in-interface="combo1: WAN" \
protocol=tcp
/ip firewall nat
add action=masquerade chain=srcnat src-address-list=rfc-1918
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/mpls interface
add disabled=no interface=all mpls-mtu=1600
/mpls ldp
add disabled=no lsr-id=10.10.10.10 transport-addresses=10.10.10.10
/mpls ldp interface
add accept-dynamic-neighbors=yes disabled=no hello-interval=5s hold-time=15s \
interface="ether2: R1 to R2" transport-addresses=10.10.10.10
add accept-dynamic-neighbors=yes disabled=no hello-interval=5s hold-time=15s \
interface="ether3: R1 to R3" transport-addresses=10.10.10.10
add accept-dynamic-neighbors=yes disabled=no hello-interval=5s hold-time=15s \
interface="ether5: R1 to R5" transport-addresses=\
10.10.10.10
add accept-dynamic-neighbors=yes disabled=no hello-interval=5s hold-time=15s \
interface="ether4: R1 to R4" transport-addresses=\
10.10.10.10
/routing bfd configuration
add addresses="" disabled=no interfaces=all min-rx=200ms min-tx=200ms \
multiplier=5
/routing ospf interface-template
add area=ospf-area-Backbone auth=sha512 auth-id=0 auth-key=3749%tafT \
dead-interval=15s disabled=no hello-interval=5s interfaces="loop-back,VLAN-5\
-DHCP-Net.MGMT,VLAN6-DHCP-NAT,ether2: R1 to R2,ether3: R1 t\
o R3,ether4: R1 to R4,ether5: R1 to R5, ether6: ,ether7: Tech Access/DHCP" type=ptp use-bfd=yes
/system clock
set time-zone-name=America/New_York
/system identity
set name=R1-CCR
/system note
set show-at-login=no
/system ntp client
set enabled=yes
/system ntp client servers
add address=152.67.232.7
add address=193.187.181.6
R2
[rtoadmin@R2] > export compact
# 2024-05-01 13:46:55 by RouterOS 7.14.3
# software id = D5CH-EIFQ
#
# model = CCR1009-7G-1C
# serial number =
/interface bridge
add name=VPLS-Bridge
/interface ethernet
set [ find default-name=combo1 ] l2mtu=1700 name=\
"combo1: OSPF-to-R1"
set [ find default-name=ether1 ] l2mtu=1700 name=\
"ether1: "
set [ find default-name=ether2 ] l2mtu=1700 name="ether2: "
set [ find default-name=ether3 ] l2mtu=1700 name="ether3: "
set [ find default-name=ether4 ] l2mtu=1700
set [ find default-name=ether5 ] l2mtu=1700 name=ether5:
set [ find default-name=ether6 ] l2mtu=1700 name=\
"ether6: VPLS-DHCP-Trunk-to-Cisco9200-Eth.1"
set [ find default-name=ether7 ] l2mtu=1700 name="ether7: DHCP-Tech Access"
/interface vpls
add arp=enabled bridge=VPLS-Bridge bridge-horizon=1 disabled=no mac-address=\
02:53:0A:4D:2B:79 mtu=1500 name=VPLS- R2-To-R1 peer=\
10.10.10.10 pw-l2mtu=1580 pw-type=raw-ethernet vpls-id=10.10.10.11.1
/ip pool
add name="ether7: DHCP-Tech Access" ranges=192.168.50.10-192.168.50.14
/ip dhcp-server
add address-pool="ether7: DHCP-Tech Access" interface=\
"ether7: DHCP-Tech Access" lease-time=10m name="ether7: DHCP-Tech Access"
/port
set 0 name=serial0
set 1 name=serial1
/routing id
add disabled=no name=Loopback-ID select-dynamic-id=only-loopback
/routing ospf instance
add disabled=no mpls-te-address=10.10.10.11 mpls-te-area=0.0.0.0 name=\
ospf-instance-Main router-id=Loopback-ID
/routing ospf area
add disabled=no instance=ospf-instance-Main name=ospf-area-Backbone
/interface bridge port
add bridge=VPLS-Bridge horizon=1 interface=\
"ether6: VPLS-DHCP-Trunk-to-Cisco9200-Eth.1"
/ip firewall connection tracking
set udp-timeout=10s
/ipv6 settings
set max-neighbor-entries=14336
/interface ovpn-server server
set auth=sha1,md5
/ip address
add address=172.20.0.4/29 interface="combo1: OSPF-to-R1" \
network=172.20.0.0
add address=172.20.0.41/29 interface="ether1: " \
network=172.20.0.40
add address=172.20.0.49/29 disabled=yes interface="ether2: " network=\
172.20.0.48
add address=172.20.0.57/29 disabled=yes interface="ether3: " network=\
172.20.0.56
add address=192.168.50.9/29 interface="ether7: DHCP-Tech Access" network=\
192.168.50.8
add address=10.10.10.11 interface=loop-back network=10.10.10.11
add address=192.168.100.1/24 disabled=yes interface=\
VPLS-R2-To-R1 network=192.168.100.0
/ip dhcp-relay
add dhcp-server=172.30.0.1 disabled=no interface=\
VPLS-R2-To-R1 local-address=192.168.100.1 name=\
Nat-DHCP-Relay
/ip dhcp-server network
add address=192.168.50.8/29 gateway=192.168.50.9
/ip dns
set allow-remote-requests=yes servers=\
8.8.8.8,8.8.4.4,1.1.1.1,1.0.0.1,9.9.9.9,149.112.112.112
/ip firewall filter
add action=drop chain=input dst-port=53 in-interface=\
"combo1: OSPF-to-R1" protocol=tcp
add action=drop chain=input dst-port=53 in-interface=\
"combo1: OSPF-to-R1" protocol=udp
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/mpls interface
add disabled=no interface=all mpls-mtu=1600
/mpls ldp
add disabled=no lsr-id=10.10.10.11 transport-addresses=10.10.10.11
/mpls ldp interface
add accept-dynamic-neighbors=yes disabled=no hello-interval=5s hold-time=15s \
interface="combo1: OSPF-to-R1" transport-addresses=\
10.10.10.11
/routing bfd configuration
add disabled=no interfaces=all min-rx=200ms min-tx=200ms multiplier=5
/routing ospf interface-template
add area=ospf-area-Backbone auth=sha512 auth-key=3749%tafT dead-interval=15s \
disabled=no hello-interval=5s interfaces=\
"loop-back,combo1: OSPF-to-R1,ether7: DHCP-Tech Access" \
type=ptp use-bfd=yes
/system clock
set time-zone-name=America/New_York
/system identity
set name=R2
/system note
set show-at-login=no