Hi all
After searching the internet for days i i thought it would be a good idea to ask those who know.
I have a CRS226-24g-25-RM and require it to add clients into VLANs according to there MAC
I have managed to get that much to work and receive an ip based on VLAN allocated to a specified MAC
Now the part where i am baffled:
I require some vlans to be able to communicate with others for shared devices (eg.printers, NAS)
also
I require a VLAN to be able to communicate with all devices for management purposes
The current network layout is flat, with all pcs, ipphones, printers.... on a single subnet, i would like to reduce the amount of broadcast traffic with this implementation
This setup is only 2 devices for testing before i put into production
Here is my export:
[admin@MikroTik] > export
nov/02/2014 09:55:37 by RouterOS 6.20
/interface ethernet
set [ find default-name=ether3 ] master-port=ether2
set [ find default-name=ether4 ] master-port=ether2
set [ find default-name=ether5 ] master-port=ether2
set [ find default-name=ether6 ] master-port=ether2
set [ find default-name=ether7 ] master-port=ether2
set [ find default-name=ether8 ] master-port=ether2
set [ find default-name=ether9 ] master-port=ether2
set [ find default-name=ether10 ] master-port=ether2
set [ find default-name=ether11 ] master-port=ether2
set [ find default-name=ether12 ] master-port=ether2
set [ find default-name=ether13 ] master-port=ether2
set [ find default-name=ether14 ] master-port=ether2
set [ find default-name=ether15 ] master-port=ether2
set [ find default-name=ether16 ] master-port=ether2
set [ find default-name=ether17 ] master-port=ether2
set [ find default-name=ether18 ] master-port=ether2
set [ find default-name=ether19 ] master-port=ether2
set [ find default-name=ether20 ] master-port=ether2
set [ find default-name=ether21 ] master-port=ether2
set [ find default-name=ether22 ] master-port=ether2
set [ find default-name=ether23 ] master-port=ether2
set [ find default-name=ether24 ] master-port=ether2
/interface vlan
add interface=ether2 l2mtu=1584 name=vlan2 vlan-id=200
add interface=ether2 l2mtu=1584 name=vlan3 vlan-id=300
/ip pool
add name=dhcp_pool1 ranges=192.168.0.1-192.168.0.253
add name=dhcp_pool2 ranges=192.168.2.1-192.168.2.253
add name=dhcp_pool4 ranges=192.168.3.1-192.168.3.253
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=ether2 lease-time=3d name=
dhcp1
add address-pool=dhcp_pool2 disabled=no interface=vlan2 lease-time=3d name=
dhcp2
add address-pool=dhcp_pool4 disabled=no interface=vlan3 lease-time=3d name=
dhcp3
/port
set 0 name=serial0
/system logging action
set 2 remember=yes
/interface ethernet switch ingress-vlan-translation
add customer-vlan-format=tagged new-customer-vid=0 ports=ether2 sa-learning=
yes
/interface ethernet switch mac-based-vlan
add new-customer-vid=200 src-mac-address=40:16:7E:E4:66:05
add new-customer-vid=300 src-mac-address=02:1F:21:4C:3B:6B
/interface ethernet switch port
set 1 allow-fdb-based-vlan-translate=yes qos-scheme-precedence="pcp-based,sa-b
ased,da-based,dscp-based,protocol-based,vlan-based,pcp-based"
set 2 allow-fdb-based-vlan-translate=yes qos-scheme-precedence="pcp-based,sa-b
ased,da-based,dscp-based,protocol-based,vlan-based,pcp-based"
set 3 allow-fdb-based-vlan-translate=yes qos-scheme-precedence="pcp-based,sa-b
ased,da-based,dscp-based,protocol-based,vlan-based,pcp-based"
set 4 allow-fdb-based-vlan-translate=yes qos-scheme-precedence="pcp-based,sa-b
ased,da-based,dscp-based,protocol-based,vlan-based,pcp-based"
set 5 allow-fdb-based-vlan-translate=yes qos-scheme-precedence="pcp-based,sa-b
ased,da-based,dscp-based,protocol-based,vlan-based,pcp-based"
set 6 allow-fdb-based-vlan-translate=yes qos-scheme-precedence="pcp-based,sa-b
ased,da-based,dscp-based,protocol-based,vlan-based,pcp-based"
set 7 allow-fdb-based-vlan-translate=yes qos-scheme-precedence="pcp-based,sa-b
ased,da-based,dscp-based,protocol-based,vlan-based,pcp-based"
set 8 allow-fdb-based-vlan-translate=yes qos-scheme-precedence="pcp-based,sa-b
ased,da-based,dscp-based,protocol-based,vlan-based,pcp-based"
/ip address
add address=192.168.88.1/24 interface=ether1 network=192.168.88.0
add address=192.168.0.254/24 interface=ether2 network=192.168.0.0
add address=192.168.2.254/24 interface=vlan2 network=192.168.2.0
add address=192.168.3.254/24 interface=vlan3 network=192.168.3.0
/ip dhcp-server network
add address=192.168.0.0/24 dns-server=8.8.8.8 gateway=192.168.0.254
add address=192.168.2.0/24 dns-server=8.8.8.8 gateway=192.168.2.254
add address=192.168.3.0/24 dns-server=8.8.8.8 gateway=192.168.3.254
/ip upnp
set allow-disable-external-interface=no
/snmp
set trap-community=public
/system clock
set time-zone-name=Africa/Johannesburg
/system ntp client
set enabled=yes primary-ntp=196.43.1.9 secondary-ntp=41.79.80.34
Any help is much appreciated
